ExamGecko
Search Search Login
Home Home / Palo Alto Networks / PSE-Strata
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through. Which command returns a valid result to verify the ML is working from the command line.
Which security profile on the NGFW includes signatures to protect you from brute force attacks?
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface? A) B) C) D)
A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types. The customer uses a firewall with User-ID enabled Which feature must also be enabled to prevent these attacks?
An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer. The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)
Which component is needed for a large-scale deployment of NGFWs with multiple Panorama Management Servers?
Which three script types can be analyzed in WildFire? (Choose three)
What will best enhance security of a production online system while minimizing the impact for the existing network?
When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can belogged?

Question 116 - PSE-Strata discussion

Report
Export

A prospective customer currently uses a firewall that provides only Layer 4 inspection and protections. The customer sees traffic going to an external destination, port 53, but cannot determine what Layer 7 application traffic is going over that port Which capability of PAN-OS would address the customer's lack of visibility?

A.
Device ID, because it will give visibility into which devices are communicating with external destinations over port 53
Answers
A.
Device ID, because it will give visibility into which devices are communicating with external destinations over port 53
B.
single pass architecture (SPA), because it will improve the performance of the Palo Alto Networks Layer 7 inspection
Answers
B.
single pass architecture (SPA), because it will improve the performance of the Palo Alto Networks Layer 7 inspection
C.
User-ID, because it will allow the customer to see which users are sending traffic to external destinations over port 53
Answers
C.
User-ID, because it will allow the customer to see which users are sending traffic to external destinations over port 53
D.
App-ID, because it will give visibility into what exact applications are being run over that port and allow the customer to block unsanctioned applications using port 53
Answers
D.
App-ID, because it will give visibility into what exact applications are being run over that port and allow the customer to block unsanctioned applications using port 53
Suggested answer: D
Show Answer
asked 23/09/2024
Rudy Raijmakers
40 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms