Update Free Palo Alto Networks PSE-Strata Exam Dumps [2022]

test2022-07-22T06:26:14+00:00

Passing the PSE-Strata exam is the best way to become one of the most in-demand professionals in your area. There is no better way to prepare for the PSE-Strata exam than to use our actual Palo Alto Networks PSE-Strata Exam Dumps. We ensure that if you use the most accurate Palo Alto Networks PSE-Strata Exam Dumps, you will pass the exam on the first try! FreeTestShare Palo Alto Networks PSE-Strata Exam Dumps are written to the highest technical standards, with real exam questions and answers. If you want to pass PSE-Strata exam quickly, get FreeTestShare Palo Alto Networks PSE-Strata exam dumps for a single success.

This free practice test can now be used to assess your preparation.

Page 1 of 3

1. Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?

A)

Option

2. What action would address the sub-optimal traffic path shown in the figure?

Key:

RN - Remote Network

SC - Service Connection

MU GW - Mobile User Gateway

Onboard a Service Connection in the Americas region

Remove the Service Connection in the EMEA region

Onboard a Service Connection in the APAC region

Onboard a Remote Network location in the EMEA region

3. What are two presales selling advantages of using Expedition? (Choose two.)

map migration gaps to professional services statement of Works (SOWs)

streamline & migrate to Layer7 policies using Policy Optimizer

reduce effort to implement policies based on App-ID and User-ID

easy migration process to move to Palo Alto Networks NGFWs

4. There are different Master Keys on Panorama and managed firewalls.

What is the result if a Panorama Administrator pushes configuration to managed firewalls?

The push operation will fail regardless of an error or not within the configuration itself

Provided there’s no error within the configuration to be pushed, the push will succeed

The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

5. In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

HA3

HA1

HA2

HA4

6. A customer requests that a known spyware threat signature be triggered based on a rate of

occurrence, for example, 10 hits in 5 seconds.

How is this goal accomplished?

Create a custom spyware signature matching the known signature with the time attribute

Add a correlation object that tracks the occurrences and triggers above the desired threshold

Submit a request to Palo Alto Networks to change the behavior at the next update

Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

7. What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}

prevention of cyber attacks

safe enablement of all applications

threat remediation

defense against threats with static security solution

8. Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

Identified vulnerability exploits

Launch of an identified malware executable file

Endpoints access files from a removable drive

Suspicious host behavior

9. Prisma SaaS provides which two SaaS threat prevention capabilities? (Choose two)

shellcode protection

file quarantine

SaaS AppID signatures

WildFire analysis

remote procedural call (RPC) interrogation

10. Which task would be identified in Best Practice Assessment tool?

identify the visibility and presence of command-and-control sessions

identify sanctioned and unsanctioned SaaS applications

identify the threats associated with each application

identify and provide recommendations for device management access

Page 2 of 3

11. XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer’s requirements? (Choose two.)

Virtual systems

HA active/active

HA active/passive

Policy-based forwarding

12. WildFire subscription supports analysis of which three types? (Choose three.)

GIF

7-Zip

Flash

RPM

ISO

DMG

13. What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

A vulnerability profile to security policy rules that deny general web access

An antivirus profile to security policy rules that deny general web access

A zone protection profile to the untrust zone

A file blocking profile to security policy rules that allow general web access

14. Which two steps are required to configure the Decryption Broker? (Choose two.)

reboot the firewall to activate the license

activate the Decryption Broker license

enable SSL Forward Proxy decryption

enable a pair of virtual wire interfaces to forward decrypted traffic

15. A client chooses to not block uncategorized websites.

Which two additions should be made to help provide some protection? (Choose two.)

A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

A security policy rule using only known URL categories with the action set to allow

16. When having a customer pre-sales call, which aspects of the NGFW should be covered?

The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks

The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content ― malware, phishing, and C2 are updated every five minutes ― to ensure that you can manage access to these sites within minutes of categorization

The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor

Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing

17. Which three features are used to prevent abuse of stolen credentials? (Choose three.)

multi-factor authentication

URL Filtering Profiles

WildFire Profiles

Prisma Access

SSL decryption rules

18. 1.Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

19. Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

M-200

M-600

M-100

Panorama VM-Series

20. What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)

Benign

Spyware

Malicious

Phishing

Grayware

Page 3 of 3

21. Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

WildFire hybrid deployment

5 minute WildFire updates to threat signatures

Access to the WildFire API

PE file upload to WildFire

22. Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

Quarantine

Allow

Reset

Redirect

Drop

Alert

23. A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default .

What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports.

Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.

Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis.

Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default.