Which profile or policy should be applied to protect against port scans from the internet?

Zone protection profile on the zone of the ingress interface

Interface management profile on the zone of the ingress interface

Zone protection profile on the zone of the ingress interface

An App-ID security policy rule to block traffic sourcing from the untrust zone

Security profiles to security policy rules for traffic sourcing from the untrust zone

When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

depends on the Cortex Data Lake tier purchased

What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

A file blocking profile to security policy rules that allow general web access

A vulnerability profile to security policy rules that deny general web access

An antivirus profile to security policy rules that deny general web access

A zone protection profile to the untrust zone

A file blocking profile to security policy rules that allow general web access

A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

Collects forensic information about the event

Communicates the status of the endpoint to the ESM

Notifies the user about the event

Informs WildFire and sends up a signature to the Cloud

Collects forensic information about the event

Communicates the status of the endpoint to the ESM

Notifies the user about the event

Remediates the event by deleting the malicious file

Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule

a unique Decryption policy rule is required per security chain

dedicated pair of decryption forwarding interfaces required per security chain

a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule

a unique Decryption policy rule is required per security chain

a single pair of decryption forwarding interfaces

Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

Threat Prevention on the firewall, and Support on Panorama

WildFire on the firewall, and AutoFocus on Panorama

Threat Prevention on the firewall, and Support on Panorama

GlobalProtect on the firewall, and Threat Prevention on Panorama

URL Filtering on the firewall, and MineMeld on Panorama

A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.

Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports.

Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.

Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis.

Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default.

Which two steps are required to configure the Decryption Broker? (Choose two.)

activate the Decryption Broker license

enable a pair of virtual wire interfaces to forward decrypted traffic

reboot the firewall to activate the license

activate the Decryption Broker license

enable SSL Forward Proxy decryption

enable a pair of virtual wire interfaces to forward decrypted traffic

What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)

when client's want to see the power of the platform

provide users visibility into the applications currently allowed on the network

assess the state of NGFW feature adoption

when you're delivering a security strategy

when client's want to see the power of the platform

provide users visibility into the applications currently allowed on the network

help streamline the deployment and migration of NGFWs

assess the state of NGFW feature adoption

What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?

It allows Palo Alto Networks to add new functions to existing hardware

There are no benefits other than slight performance upgrades

It allows Palo Alto Networks to add new functions to existing hardware

Only one processor is needed to complete all the functions within the box

It allows Palo Alto Networks to add new devices to existing hardware

Which security profile on the NGFW includes signatures to protect you from brute force attacks?

Vulnerability Protection Profile

The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTPdecoder for URL filtering is handled by which component in the NGFW?

SIA (Scan It All) Processing Engine

A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?

The Automated Correlation Engine

Cortex XDR and Cortex Data Lake

WildFire with API calls for automation

3rd Party SIEM which can ingest NGFW logs and perform event correlation

What two types of certificates are used to configure SSL Forward Proxy? (?hoose two.)

Enterprise CA-signed certificates

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

There are different Master Keys on Panorama and managed firewalls.What is the result if a Panorama Administrator pushes configuration to managed firewalls?

The push operation will fail regardless of an error or not within the configuration itself

Provided there’s no error within the configuration to be pushed, the push will succeed

The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

Which task would be identified in Best Practice Assessment tool?

identify sanctioned and unsanctioned SaaS applications

identify the visibility and presence of command-and-control sessions

identify sanctioned and unsanctioned SaaS applications

identify the threats associated with each application

identify and provide recommendations for device management access

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.How is this goal accomplished?

Create a custom spyware signature matching the known signature with the time attribute

Add a correlation object that tracks the occurrences and triggers above the desired threshold

Submit a request to Palo Alto Networks to change the behavior at the next update

Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.)

Network segments in the Datacenter need to be advertised to only one Service Connection

A maximum of four service connections per Datacenter are supported with this topology

Network segments in the Datacenter need to be advertised to only one Service Connection

The customer edge device needs to support policy-based routing with symmetric return functionality

The resources in the Datacenter will only be able to reach remote network resources that share the same region

A maximum of four service connections per Datacenter are supported with this topology

A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today's security infrastructure.Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?

SP3 (Single Pass Parallel Processing)

A customer has business-critical applications that rely on the general web-browsing application.Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

Vulnerability Protection Profile

Which statement is true about Deviating Devices and metrics?

A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation

Deviating Device Tab is only available with a SD-WAN Subscription

An Administrator can set the metric health baseline along with a valid standard deviation

Deviating Device Tab is only available for hardware-based firewalls

Palo Alto Networks PSE-Strata Practice Test 2 - Free Online Exam Prep & Questions

A company has deployed the following

• VM-300 firewalls in AWS

• endpoint protection with the Traps Management Service

• a Panorama M-200 for managing its VM-Series firewalls

• PA-5220s for its internet perimeter,

• Prisma SaaS for SaaS security.

Which two products can send logs to the Cortex Data Lake? (Choose two).

Prisma SaaS

Traps Management Service

VM-300 firewalls

Panorama M-200 appliance

Comment (0)

Palo Alto Networks PSE-Strata Practice Test 2

Question

Palo Alto Networks PSE-Strata Practice Tests

Practice Tests