Palo Alto Networks PSE-STRATA Online Practice Questions and Exam Preparation

Palo Alto Networks PSE-STRATA Online Questions & Answers

• Question 81:

  Within the Five-Step Methodology of Zero Trust, in which step would application access and user access be defined?

  A. Step 3: Architect a Zero Trust Network
  B. Step 5. Monitor and Maintain the Network
  C. Step 4: Create the Zero Trust Policy
  D. Step 1: Define the Protect Surface
  E. Step 2 Map the Protect Surface Transaction Flows
  D. Step 1: Define the Protect Surface

• Question 82:

  A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.

  Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?

  A. The Automated Correlation Engine
  B. Cortex XDR and Cortex Data Lake
  C. WildFire with API calls for automation
  D. 3rd Party SIEM which can ingest NGFW logs and perform event correlation
  A. The Automated Correlation Engine

• Question 83:

  Which CLI command allows visibility into SD-WAN events such as path Selection and path quality measurements?

  A. >show sdwan path-monitor stats vif
  B. >show sdwan session distribution policy-name
  C. >show sdwan connection all
  D. >show sdwan event
  D. >show sdwan event

• Question 84:

  DRAG DROP

  Match the functions to the appropriate processing engine within the dataplane.

  Select and Place:

  

  

• Question 85:

  What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}

  A. prevention of cyber attacks
  B. safe enablement of all applications
  C. threat remediation
  D. defense against threats with static security solution
  A. prevention of cyber attacks
  C. threat remediation

• Question 86:

  Which two of the following does decryption broker provide on a NGFW? (Choose two.)

  A. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
  B. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
  C. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
  D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times
  A. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
  D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

• Question 87:

  A WildFire subscription is required for which two of the following activities? (Choose two)

  A. Filter uniform resource locator (URL) sites by category.
  B. Forward advanced file types from the firewall for analysis.
  C. Use the WildFire Application Programming Interface (API) to submit website links for analysis
  D. Enforce policy based on Host Information Profile (HIP)
  E. Decrypt Secure Sockets Layer (SSL)
  B. Forward advanced file types from the firewall for analysis.
  C. Use the WildFire Application Programming Interface (API) to submit website links for analysis

• Question 88:

  A company has deployed the following

  1.

  VM-300 firewalls in AWS

  2.

  endpoint protection with the Traps Management Service

  3.

  a Panorama M-200 for managing its VM-Series firewalls

  4.

  PA-5220s for its internet perimeter,

  5.

  Prisma SaaS for SaaS security.

  Which two products can send logs to the Cortex Data Lake? (Choose two).

  A. Prisma SaaS
  B. Traps Management Service
  C. VM-300 firewalls
  D. Panorama M-200 appliance
  C. VM-300 firewalls
  D. Panorama M-200 appliance

• Question 89:

  When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

  A. 8MB
  B. depends on the Cortex Data Lake tier purchased
  C. 18 bytes
  D. 1500 bytes
  D. 1500 bytes

• Question 90:

  Which solution informs a customer concerned about zero-day targeted attacks whether an attack is specifically targeted at its property?

  A. AutoFocus
  B. Panorama Correlation Report
  C. Cortex XSOAR Community edition
  D. Cortex XDR Prevent
  A. AutoFocus