Home / Palo Alto Networks / PSE-Strata

Palo Alto Networks PSE-Strata Practice Test - Questions Answers, Page 11

Question list

List of questions

Question 101

(0)

Which filtering criterion is used to determine users to be included as members of a dynamic user group (DUG)?

Question 102

(0)

A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture. What are two steps in this process? (Choose two.)

Question 103

(0)

Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?

Question 104

(0)

When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can belogged?

Question 105

(0)

Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?

Question 106

(0)

WildFire can discover zero-day malware in which three types of traffic? (Choose three)

Question 107

(0)

In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)

Question 108

(0)

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

Question 109

(0)

Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

Question 110

(0)

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS). Which Security profile is used to configure Domain Name Securit

Question 101

Which filtering criterion is used to determine users to be included as members of a dynamic user group (DUG)?

Security policy rule

Tag

IP address

Show Answer Comment (0)

Question 102

A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture.

What are two steps in this process? (Choose two.)

Validate user identities through authentication

Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall

Categorize data and applications by levels of sensitivity

Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls

Show Answer Comment (0)

Question 103

Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?

User ID and Device-ID

Source-D and Network.ID

Source ID and Device-ID

User-ID and Source-ID

Show Answer Comment (0)

Question 104

When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can belogged?

X-Forwarded-For

HTTP method

HTTP response status code

Content type

Show Answer Comment (0)

Question 105

Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?

It processes each feature in a separate single pass with additional performance impact for each enabled feature.

Its processing applies only to security features and does not include any networking features.

It processes all traffic in a single pass with no additional performance impact for each enabled feature.

It splits the traffic and processes all security features in a single pass and all network features in a separate pass

Show Answer Comment (0)

Question 106

WildFire can discover zero-day malware in which three types of traffic? (Choose three)

SMTP

HTTPS

FTP

DNS

TFTP

Show Answer Comment (0)

Question 107

In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)

SaaS reports

data filtering logs

WildFire analysis reports

threat logs

botnet reports

Show Answer Comment (0)

Question 108

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

Run a Perl script to regularly check for updates and alert when one is released

Monitor update announcements and manually push updates to Crewall

Store updates on an intermediary server and point all the firewalls to it

Use dynamic updates with the most aggressive schedule required by business needs

Show Answer Comment (0)

Question 109

Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

it requires the Vulnerability Protection profile to be enabled

DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates

infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

It requires a Sinkhole license in order to activate

Show Answer Comment (0)

Question 110

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).

Which Security profile is used to configure Domain Name Security (DNS) to Identity and block previously unknown DGA-based threats in real time?

URL Filtering profile

WildFire Analysis profile

Vulnerability Protection profile

Anti-Spyware profile

Show Answer Comment (0)

Total 139 questions

9 10 11 12 13

Go to page: of 14

Palo Alto Networks PSE-Strata Practice Test - Questions Answers, Page 11

Question list

List of questions

Question 101

(0)

Question 102

(0)

Question 103

(0)

Question 104

(0)

Question 105

(0)

Question 106

(0)

Question 107

(0)

Question 108

(0)

Question 109

(0)

Question 110

(0)

Related questions

Question