Which two features are key in preventing unknown targeted attacks? (Choose two)

App-ID with the Zero Trust model

Single Pass Parallel Processing (SP3)

Which CLI command allows visibility into SD-WAN events such as path Selection and path quality measurements?

>show sdwan path-monitor stats vif

>show sdwan session distribution policy-name

A customer requires an analytics tool with the following attributes:- Uses the logs on the firewall to detect actionable events on the network- Automatically processes a series of related threat events that, when combines, indicate a likely comprised host on the network- Pinpoints the area of risk and allows for assessment of the risk to action can be taken to prevent exploitation of network resources Which feature of PAN-OS will address these requirements?

Automated correlation engine (ACE)

WildFire with application program interface (API) calls for automation

Third-party security information and event management (SIEM) which can ingest next-generation firewall (NGFW) logs

Automated correlation engine (ACE)

Cortex XDR and Cortex Data Lake

What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

improved revenue due to more efficient network traffic throughput

Increased security due to scalable cloud delivered security Services (CDSS)

Cost savings due to reduction in IT management effort and device

operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)

improved revenue due to more efficient network traffic throughput

Increased security due to scalable cloud delivered security Services (CDSS)

Cost savings due to reduction in IT management effort and device

Step 1: Define the protect surface

Step 4. Create the Zero Trust policy.

Step 2: Map the transaction flows.

Step 3. Architect a Zero Trust network.

Step 1: Define the protect surface

What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

allow the request and all subsequent responses

temporarily disable the DNS Security function

discard the request and all subsequent responses

What is an advantage of having WildFire machine learning (ML) capability Inline on the firewall?

It enables the firewall to block unknown malicious files in real time and prevent patient zero without disrupting business productivity

It eliminates of the necessity for dynamic analysis in the cloud

It enables the firewall to block unknown malicious files in real time and prevent patient zero without disrupting business productivity

It is always able to give more accurate verdicts than the cloud ML analysis reducing false positives and false negatives

It improves the CPU performance of content inspection

What are two ways to manually add and remove members of dynamic user groups (DUGs)? (Choose two)

Tag the user using Panorama or the Web Ul of the firewall.

Tag the user through the firewalls XML API.

Add the user to an external dynamic list (EDL).

Tag the user using Panorama or the Web Ul of the firewall.

Tag the user through the firewalls XML API.

Tag the user through Active Directory

A packet that is already associated with a current session arrives at the firewall.What is the flow of the packet after the firewall determines that it is matched with an existing session?

it is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through a single stream-based content inspection engine before egress.

It is sent through the slow path for further inspection. If subject to content inspection, it will pass through a single stream-based content inspection engines before egress

It is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through multiple content inspection engines before egress

It is sent through the slow path for further inspection. If subject to content inspection, it will pass through multiple content inspection engines before egress

What helps avoid split brain in active / passive high availability (HA) pair deployment?

Use the management interface as the HA1 backup link

Enable preemption on both firewalls in the HA pair.

Use a standard traffic interface as the HA3 link.

Use the management interface as the HA1 backup link

Use a standard traffic interface as the HA2 backup

The Palo Ao Networks Cloud Identity Engino (CIE) includes which service that supports identity Providers (ldP)?

Directory Sync and Cloud Authentication Service that support IdP ung SAML 2.0 and OAuth2

Cloud Authentication Service that supports IdP using SAML 2.0 and OAuth2

Directory Sync and Cloud Authentication Service that support IdP ng SAML 2.0

Directory Sync that supports IdP using SAML 2.0

Which component is needed for a large-scale deployment of NGFWs with multiple Panorama Management Servers?

Panorama Large Scale VPN (LSVPN) plugin

Palo Alto Networks Cluster license

Palo Alto Networks PSE-Strata Practice Test 4 - Free Online Exam Prep & Questions

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Palo Alto Networks PSE-Strata Practice Test 4

Question

Palo Alto Networks PSE-Strata Practice Tests

Practice Tests