PSE-Strata Sample Questions Answers

A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.

Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)

Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer's current security posture?

A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

A customer requires an analytics tool with the following attributes:

- Uses the logs on the firewall to detect actionable events on the network

- Automatically processes a series of related threat events that, when combines, indicate a likely comprised host on the network

- Pinpoints the area of risk and allows for assessment of the risk to action can be taken to prevent exploitation of network resources

Which feature of PAN-OS will address these requirements?

What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}

The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTP decoder for URL filtering is handled by which component in the NGFW?

Which two products can send logs to the Cortex Data Lake? (Choose two.)

What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

WildFire subscription supports analysis of which three types? (Choose three.)

In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)

WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through.

Which command returns a valid result to verify the ML is working from the command line.

Which are the three mandatory components needed to run Cortex XDR? (Choose three.)

The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security.

The firewall provides which three types of reports? (Choose three.)

In PAN-OS 10.0 and later, DNS Security allows policy actions to be applied based on which three domains? (Choose three.)

Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server? (Choose three.)

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).

Which Security profile is used to configure Domain Name Security (DNS) to Identity and block

previously unknown DGA-based threats in real time?

Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?

A)

B)

C)

D)

Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)

Which filtering criterion is used to determine users to be included as members of a dynamic user group (DUG)?

Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single

Datacenter? (Choose two.)

When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

Match the WildFire Inline Machine Learning Model to the correct description for that model.

Which three platform components can identify and protect against malicious email links? (Choose three.)

Which three script types can be analyzed in WildFire? (Choose three)

A customer requires protections and verdicts for portable executable (PE) and executable and linkable format (ELF), as well as the ability to integrate with existing security tools.

Which Cloud-Delivered Security Service (CDSS) does Palo Alto Networks provide that will address this requirement?

A WildFire subscription is required for which two of the following activities? (Choose two)

in which step of the Palo Alto Networks Five-Step Zero Trust Methodology would an organization's critical data, applications, assets, and services (DAAS) be identified?

Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?

A)

B)

C)

D)

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.

How is this goal accomplished?

Which three features are used to prevent abuse of stolen credentials? (Choose three.)

What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?