Home / Palo Alto Networks / PSE-Strata

Palo Alto Networks PSE-Strata Practice Test - Questions Answers, Page 14

Question list

List of questions

Question 131

(0)

What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

Question 132

(0)

What is the default behavior in PAN-OS when a 12 MB portable executable (PE) fe is forwarded to the WildFire cloud service?

Question 133

(0)

What is an advantage of having WildFire machine learning (ML) capability Inline on the firewall?

Question 134

(0)

Which three script types can be analyzed in WildFire? (Choose three)

Question 135

(0)

What are two ways to manually add and remove members of dynamic user groups (DUGs)? (Choose two)

Question 136

(0)

A packet that is already associated with a current session arrives at the firewall. What is the flow of the packet after the firewall determines that it is matched with an existing session?

Question 137

(0)

What helps avoid split brain in active / passive high availability (HA) pair deployment?

Question 138

(0)

The Palo Ao Networks Cloud Identity Engino (CIE) includes which service that supports identity Providers (ldP)?

Question 139

(0)

Which component is needed for a large-scale deployment of NGFWs with multiple Panorama Management Servers?

Question 131

What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

allow the request and all subsequent responses

temporarily disable the DNS Security function

block the query

discard the request and all subsequent responses

Show Answer Comment (0)

Question 132

What is the default behavior in PAN-OS when a 12 MB portable executable (PE) fe is forwarded to the WildFire cloud service?

PE File is not forwarded.

Flash file is not forwarded.

PE File is forwarded

Flash file is forwarded

Show Answer Comment (0)

Question 133

What is an advantage of having WildFire machine learning (ML) capability Inline on the firewall?

It eliminates of the necessity for dynamic analysis in the cloud

It enables the firewall to block unknown malicious files in real time and prevent patient zero without disrupting business productivity

It is always able to give more accurate verdicts than the cloud ML analysis reducing false positives and false negatives

It improves the CPU performance of content inspection

Show Answer Comment (0)

Question 134

Which three script types can be analyzed in WildFire? (Choose three)

PythonScript

MonoSenpt

JScript

PowerShell Script

VBScript

Show Answer Comment (0)

Question 135

What are two ways to manually add and remove members of dynamic user groups (DUGs)? (Choose two)

Add the user to an external dynamic list (EDL).

Tag the user using Panorama or the Web Ul of the firewall.

Tag the user through the firewalls XML API.

Tag the user through Active Directory

Show Answer Comment (0)

Question 136

A packet that is already associated with a current session arrives at the firewall.

What is the flow of the packet after the firewall determines that it is matched with an existing session?

it is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through a single stream-based content inspection engine before egress.

It is sent through the slow path for further inspection. If subject to content inspection, it will pass through a single stream-based content inspection engines before egress

It is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through multiple content inspection engines before egress

It is sent through the slow path for further inspection. If subject to content inspection, it will pass through multiple content inspection engines before egress

Show Answer Comment (0)