PSE-Strata by Palo Alto Networks Valid Free Exam Practice Test

Question 1

Which task would be identified in Best Practice Assessment tool?

A. identify the visibility and presence of command-and-control sessions B. identify and provide recommendations for device management access C. identify sanctioned and unsanctioned SaaS applications D. identify the threats associated with each application

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)

A. when you're delivering a security strategy B. assess the state of NGFW feature adoption C. when client's want to see the power of the platform D. help streamline the deployment and migration of NGFWs E. provide users visibility into the applications currently allowed on the network

Correct Answer: A,B,C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

How do you configure the rate of file submissions to WildFire in the NGFW?

A. based on the purchased license uploaded B. QoS tagging C. maximum number of files per minute D. maximum number of files per day

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

A. a unique Decryption policy rule is required per security chain B. a single pair of decryption forwarding interfaces C. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule D. dedicated pair of decryption forwarding interfaces required per security chain

Correct Answer: A,C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered?
(Choose two.)

A. the number of Traps agents B. retention requirements C. Traps agent forensic data D. agent size and OS

Correct Answer: A,B

Question 6

Which three of the following actions must be taken to enable Credential Phishing Prevention? (Choose three.)

A. Define a Secure Sockets Layer (SSL) decryption rule base B. Enable App-ID C. Define a uniform resource locator (URL) Filtering profile D. Enable User Credential Detection E. Enable User-ID

Correct Answer: C,D,E

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

The ability to prevent users from resolving internet protocol (IP) addresses to malicious, grayware, or newly registered domains is provided by which Security service?

A. WildFire B. loT Security C. Threat Prevention D. DNS Security

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

in which step of the Palo Alto Networks Five-Step Zero Trust Methodology would an organization's critical data, applications, assets, and services (DAAS) be identified?

A. Step 2: Map the transaction flows. B. Step 1: Define the protect surface C. Step 3. Architect a Zero Trust network. D. Step 4. Create the Zero Trust policy.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

A. DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates B. it requires the Vulnerability Protection profile to be enabled C. It requires a Sinkhole license in order to activate D. infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Palo Alto Networks System Engineer Professional - Strata - PSE-Strata Exam Practice Test