Palo Alto Networks PSE Strata Exam Dumps Updated [2022] - Valid For Passing PSE Strata Exam

Palo Alto Networks PSE Strata Exam Dumps Updated [2022] – Valid For Passing PSE Strata Exam

Eleanor2022-07-20T09:03:54+00:00

Passing Palo Alto Networks System Engineer Professional – Strata exam verifies that you possess the necessary knowledge, skills, and abilities required to demonstrate knowledge in the competitive features and functions of Palo Alto Networks Next-Generation firewalls, execute an evaluation of Palo Alto Networks firewalls, and present a Security Lifecycle Review (SLR) report. But how to pass the PSE Strata exam successfully? We have the Palo Alto Networks PSE Strata exam dumps with the most updated questions and answers. The successful certified candidates and students have verified that the updated PSE Strata exam dumps are valid for passing PSE Strata Palo Alto Networks System Engineer Professional – Strata certification exam.

You can verify the PSE Strata exam dumps by yourself by ways of reading PSE Strata free dumps below:

Page 1 of 3

1. What are three considerations when deploying User-ID? (Choose three.)

Specify included and excluded networks when configuring User-ID

Only enable User-ID on trusted zones

Use a dedicated service account for User-ID services with the minimal permissions necessary

User-ID can support a maximum of 15 hops

Enable WMI probing in high security networks

2. Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

3. Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)

Threat logs

WildFire analysis reports

Botnet reports

Data filtering logs

SaaS reports

4. DRAG DROP

Match the functions to the appropriate processing engine within the dataplane.

5. 1.Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

6. What is the basis for purchasing Cortex XDR licensing?

volume of logs being processed based on Datalake purchased

number of nodes and endpoints providing logs

unlimited licenses

number of NGFWs

7. Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

WildFire hybrid deployment

5 minute WildFire updates to threat signatures

Access to the WildFire API

PE file upload to WildFire

8. What are two advantages of the DNS Sinkholing feature? (Choose two.)

It forges DNS replies to known malicious domains.

It monitors DNS requests passively for malware domains.

It can be deployed independently of an Anti-Spyware Profile.

It can work upstream from the internal DNS server.

9. Which security profile on the NGFW includes signatures to protect you from brute force attacks?

Zone Protection Profile

URL Filtering Profile

Vulnerability Protection Profile

Anti-Spyware Profile

10. A customer has business-critical applications that rely on the general web-browsing application .

Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

File Blocking Profile

DoS Protection Profile

URL Filtering Profile

Vulnerability Protection Profile

Page 2 of 3

11. What action would address the sub-optimal traffic path shown in the figure?

Key:

RN - Remote Network

SC - Service Connection

MU GW - Mobile User Gateway

Onboard a Service Connection in the Americas region

Remove the Service Connection in the EMEA region

Onboard a Service Connection in the APAC region

Onboard a Remote Network location in the EMEA region

12. Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

Traffic is separated by zones

Policy match is based on application

Identification of application is possible on any port

Traffic control is based on IP port, and protocol

13. How frequently do WildFire signatures move into the antivirus database?

every 24 hours

every 12 hours

once a week

every 1 hour

14. When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered? (Choose two.)

retention requirements

Traps agent forensic data

the number of Traps agents

agent size and OS

15. Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

Quarantine

Allow

Reset

Redirect

Drop

Alert

16. An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.

The customer already has multiple M-100s set up as a log collector group .

What are two valid reasons for deploying Panorama in High Availability? (Choose two.)

Control of post rules

Control local firewall rules

Ensure management continuity

Improve log collection redundancy

17. Palo Alto Networks publishes updated Command-and-Control signatures .

How frequently should the related signatures schedule be set?

Once a day

Once a week

Once every minute

Once an hour

18. Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)

Network Tab

Policies Tab

Device Tab

Objects Tab

19. When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

1500 to 2500 bytes

10MB to 30 MB

1MB to 5 MB

100MB to 200 MB

20. Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

Include all traffic types in decryption policy

Inability to access websites

Exclude certain types of traffic in decryption policy

Deploy decryption setting all at one time

Ensure throughput is not an issue

Page 3 of 3

21. Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

eDirectory monitoring

Client Probing

SNMP server

TACACS

Active Directory monitoring

Lotus Domino

RADIUS

22. Which profile or policy should be applied to protect against port scans from the internet?

Interface management profile on the zone of the ingress interface

Zone protection profile on the zone of the ingress interface

An App-ID security policy rule to block traffic sourcing from the untrust zone

Security profiles to security policy rules for traffic sourcing from the untrust zone

23. A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.

Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?

The Automated Correlation Engine

Cortex XDR and Cortex Data Lake

WildFire with API calls for automation

3rd Party SIEM which can ingest NGFW logs and perform event correlation

24. Which three new script types can be analyzed in WildFire? (Choose three.)

VBScript

JScript

MonoScript

PythonScript

PowerShell Script

25. XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer’s requirements? (Choose two.)

Virtual systems

HA active/active

HA active/passive

Policy-based forwarding

26. A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.

Which Network Processing Card should be recommended in the Bill of Materials?

PA-7000-20GQ-NPC

PA-7000-40G-NPC

PA-7000-20GQXM-NPC

PA-7000-20G-NPC

27. DRAG DROP

Match the WildFire Inline Machine Learning Model to the correct description for that model.

28. Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

M-200

M-600

M-100

Panorama VM-Series

29. When having a customer pre-sales call, which aspects of the NGFW should be covered?

The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks

The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content ― malware, phishing, and C2 are updated every five minutes ― to ensure that you can manage access to these sites within minutes of categorization

The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor

Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing

30. Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?

A)

Option

Palo Alto Networks PSE Strata Exam Dumps Updated [2022] – Valid For Passing PSE Strata Exam