What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}

safe enablement of all applications

defense against threats with static security solution

What are two advantages of the DNS Sinkholing feature? (Choose two.)

It forges DNS replies to known malicious domains.

It can work upstream from the internal DNS server.

It forges DNS replies to known malicious domains.

It monitors DNS requests passively for malware domains.

It can be deployed independently of an Anti-Spyware Profile.

It can work upstream from the internal DNS server.

Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)

validate credential submission detection

define an SSL decryption rulebase

validate credential submission detection

An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?

Remove unwanted categories listed under 'High Risk' and use relevant information

Create a footnote within the SLR generation tool

Edit the Key-Findings text to list the other types of categories that may be of interest

Remove unwanted categories listed under 'High Risk' and use relevant information

Produce the report and edit the PDF manually

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

It can bootstrap the virtual firewalls for dynamic deployment scenarios.

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

It can automatically create address groups for use with KVM.

It can bootstrap the virtual firewalls for dynamic deployment scenarios.

What are two presales selling advantages of using Expedition? (Choose two.)

map migration gaps to professional services statement of Works (SOWs)

easy migration process to move to Palo Alto Networks NGFWs

map migration gaps to professional services statement of Works (SOWs)

streamline & migrate to Layer7 policies using Policy Optimizer

reduce effort to implement policies based on App-ID and User-ID

easy migration process to move to Palo Alto Networks NGFWs

Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

Policy match is based on application

Identification of application is possible on any port

Policy match is based on application

Identification of application is possible on any port

Traffic control is based on IP port, and protocol

An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)

Improve log collection redundancy

Which two network events are highlighted through correlation objects as potential security risks?(Choose two.)

Identified vulnerability exploits

Launch of an identified malware executable file

Endpoints access files from a removable drive

Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

measure the adoption of URL filters. App-ID. User-ID

identify sanctioned and unsanctioned SaaS applications

measure the adoption of URL filters. App-ID. User-ID

use of device management access and settings

expose the visibility and presence of command-and-control sessions

identify sanctioned and unsanctioned SaaS applications

In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering?(Choose two.)

Dedicated Logger Mode is required

Appliance needs to be moved into data center

How do you configure the rate of file submissions to WildFire in the NGFW?

maximum number of files per minute

based on the purchased license uploaded

maximum number of files per minute

maximum number of files per day

Prisma SaaS provides which two SaaS threat prevention capabilities? (Choose two)

remote procedural call (RPC) interrogation

A client chooses to not block uncategorized websites.Which two additions should be made to help provide some protection? (Choose two.)

A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

A security policy rule using only known URL categories with the action set to allow

Decryption port mirroring is now supported on which platform?

all hardware-based and VM-Series firewalls regardless of where installed

all hardware-based and VM-Series firewalls with the exception of VMware NSX. Citrix SDX, or public cloud hypervisors

only one the PA-5000 Series and higher

all hardware-based and VM-Series firewalls regardless of where installed

Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

5 minute WildFire updates to threat signatures

Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

Select Panorama > Licenses and click Activate feature using authorization code

Generate a Stats Dump File and upload it to the Palo Alto Networks support portal

Select Panorama > Licenses and click Activate feature using authorization code

Generate a Tech Support File and call PANTAC

Select Device > Licenses and click Activate feature using authorization code

What is the basis for purchasing Cortex XDR licensing?

number of nodes and endpoints providing logs

volume of logs being processed based on Datalake purchased

number of nodes and endpoints providing logs

How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?

Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)

Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)

Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)

Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)

Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)

Palo Alto Networks PSE-Strata Practice Test 1 - Free Online Exam Prep & Questions

What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)

A.

Next-generation firewalls deployed with WildFire Analysis Security Profiles

B.

WF-500 configured as private clouds for privacy concerns

C.

Correlation Objects generated by AutoFocus

D.

Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance

E.

Palo Alto Networks non-firewall products such as Traps and Prisma SaaS

Palo Alto Networks PSE-Strata Practice Test 1

Question

Palo Alto Networks PSE-Strata Practice Tests

Practice Tests