Exit demo PSE-STRATA Palo Alto Networks System Engineer Professional - Strata PDF format · free preview

Palo Alto Networks PSE-STRATA - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/pse-strata.html

Question 1
Multiple choice

Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)

A.

breach the perimeter

B.

weaponize vulnerabilities

C.

lateral movement

D.

exfiltrate data

E.

recon the target

F.

deliver the malware

Question 2
Single choice

An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites.

How should the SE show the customer the firewall can detect that these websites are being accessed?

A.

Create a footnote within the SLR generation tool

B.

Edit the Key-Findings text to list the other types of categories that may be of interest

C.

Remove unwanted categories listed under 'High Risk' and use relevant information

D.

Produce the report and edit the PDF manually

Question 3
Single choice

Which profile or policy should be applied to protect against port scans from the internet?

A.

Interface management profile on the zone of the ingress interface

B.

Zone protection profile on the zone of the ingress interface

C.

An App-ID security policy rule to block traffic sourcing from the untrust zone

D.

Security profiles to security policy rules for traffic sourcing from the untrust zone

Question 4
Single choice

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).

Which Security profile is used to configure Domain Name Security (DNS) to Identity and block previously unknown DGA-based threats in real time?

A.

URL Filtering profile

B.

WildFire Analysis profile

C.

Vulnerability Protection profile

D.

Anti-Spyware profile

Question 5
Multiple choice

Which two features are key in preventing unknown targeted attacks? (Choose two)

A.

nighty botnet report

B.

App-ID with the Zero Trust model

C.

WildFire Cloud threat analysis

D.

Single Pass Parallel Processing (SP3)

Question 6
Single choice

Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

A.

Prototype

B.

Inputs

C.

Class

D.

Feed Base URL

Question 7
Single choice

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

A.

Run a Perl script to regularly check for updates and alert when one is released

B.

Monitor update announcements and manually push updates to Crewall

C.

Store updates on an intermediary server and point all the firewalls to it

D.

Use dynamic updates with the most aggressive schedule required by business needs

Question 8
Multiple choice

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer's requirements? (Choose two.)

A.

Virtual systems

B.

HA active/active

C.

HA active/passive

D.

Policy-based forwarding

Question 9
Multiple choice

Which two products can send logs to the Cortex Data Lake? (Choose two.)

A.

AutoFocus

B.

PA-3260 firewall

C.

Prisma Access

D.

Prisma Public Cloud

Question 10
Multiple choice

What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)

A.

Benign

B.

Spyware

C.

Malicious

D.

Phishing

E.

Grayware

Showing 10 of 139 questions · Unlock the full set