PSE-Strata Certification - The Ultimate Guide [Updated 2022]
PSE-Strata Practice Exam and Study Guides - Verified By DumpsMaterials
NEW QUESTION 35
In PAN-OS 10.0 and later, DNS Security allows policy actions to be applied based on which three domains? (Choose three.)
- A. malware
- B. grayware
- C. command and control (C2)
- D. government
- E. benign
Answer: A,B,E
NEW QUESTION 36
What are three valid sources that are supported for user IP address mapping in Palo Alto Networks NGFW? (Choose three.)
- A. Client Probing
- B. TACACS
- C. Lotus Domino
- D. eDirectory monitoring
- E. RADIUS
- F. Active Directory monitoring
Answer: A,D,F
NEW QUESTION 37
In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?
- A. HA4
- B. HA2
- C. HA3
- D. HA1
Answer: B
NEW QUESTION 38
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?
- A. Panorama VM-Series
- B. M-200
- C. M-600
- D. M-100
Answer: A
NEW QUESTION 39
Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?
- A. infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs
- B. it requires the Vulnerability Protection profile to be enabled
- C. DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates
- D. It requires a Sinkhole license in order to activate
Answer: A
NEW QUESTION 40
Which three actions should be taken before deploying a firewall evaluation unt in a customer environment? (Choose three.)
- A. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed
- B. Set expectations for information being presented in the Security Lifecycle Review (SLR) because personal user information will be made visible
- C. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.
- D. Request that the customer make part 3978 available to allow the evaluation unit to communicate with Panorama
- E. Inform the customer that a SPAN port must be provided for the evaluation unit, assuming a TAP mode deployment.
Answer: A,C,E
NEW QUESTION 41
Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)
- A. Create a vulnerability protection profile to block all the vulnerabilities with severity low and higher
- B. Create an SSL Decryption policy to decrypt 100% of the traffic
- C. Create an anti-spyware profile to block all spyware
- D. Create a WildFire profile to schedule file uploads during low network usage windows
- E. Create an antivirus profile to block all content that matches and antivirus signature
Answer: A,B,D
NEW QUESTION 42
The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security The firewall provides which three types of reports? (Choose three.)
- A. PDF Summary Reports
- B. SNMP Reports
- C. Botnet Reports
- D. User or Group Activity Reports
- E. Netflow Reports
Answer: C,D,E
NEW QUESTION 43
An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.
The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)
- A. Improve log collection redundancy
- B. Ensure management continuity
- C. Control local firewall rules
- D. Control of post rules
Answer: A,B
NEW QUESTION 44
What aspect of PAN-OS allows for the NGFW admin to create a policy that provides auto- remediation for anomalous user behavior and malicious activity while maintaining user visibility?
- A. Dynamic Address Groups
- B. Dynamic User Groups
- C. Remote Device UserID Agent
- D. user-to-tag mapping
Answer: B
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic- user-groups
NEW QUESTION 45
Match the functions to the appropriate processing engine within the dataplane.
Answer:
Explanation:
NEW QUESTION 46
An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.
The customer already has multiple M-100s set up as a log collector group.
What are two valid reasons for deploying Panorama in High Availability? (Choose two.)
- A. Improve log collection redundancy
- B. Ensure management continuity
- C. Control local firewall rules
- D. Control of post rules
Answer: A,B
NEW QUESTION 47
There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?
- A. The push operation will fail regardless of an error or not within the configuration itself
- B. Provided there's no error within the configuration to be pushed, the push will succeed
- C. The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama
- D. There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls
Answer: A
Explanation:
https://www.reddit.com/r/paloaltonetworks/comments/onz15y/what_is_the_result_if_a_panorama
_administrator/
NEW QUESTION 48
What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?
- A. It allows Palo Alto Networks to add new devices to existing hardware
- B. Only one processor is needed to complete all the functions within the box
- C. It allows Palo Alto Networks to add new functions to existing hardware
- D. There are no benefits other than slight performance upgrades
Answer: B
NEW QUESTION 49
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)
- A. Cortex Data Lake
- B. NGFW with PANOS 8 0.5 or later
- C. Directory Syn Service
- D. Pathfinder
- E. Traps
- F. Panorama
Answer: A,B,C
NEW QUESTION 50
True or False: PAN-DB is a service that aligns URLs with category types and is fed to the WildFire threat cloud.
- A. False
- B. True
Answer: B
NEW QUESTION 51
Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two)
- A. Device Tab
- B. Network Tab
- C. Objects Tab
- D. Monitor Tab
- E. Policies Tab
Answer: A,B
Explanation:
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web- interface/ panorama-templates/template-stacks
NEW QUESTION 52
Which profile or policy should be applied to protect against port scans from the internet?
- A. Interface management profile on the zone of the ingress interface
- B. Zone protection profile on the zone of the ingress interface
- C. Security profiles to security policy rules for traffic sourcing from the untrust zone
- D. An App-ID security policy rule to block traffic sourcing from the untrust zone
Answer: B
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network- network-profiles-zone-protection/reconnaissance-protection.html
NEW QUESTION 53
......
How to prepare and pass Palo Alto Networks PSE exam?
Pass Palo Alto Networks PSE exam with the help of our training material. Palo Alto Networks PSE Strata Dumps covers all the key areas of the Palo Alto Networks certification exam. Palo Alto Networks PSE practice test contains various self-learning and self-evaluation features, which makes it easy to use for novices as well as certified professionals. Palo Alto Networks PSE practice test provides you the reliability to pass your Palo Alto Networks PSE certification exam in one attempt.
Ultimate Guide to the PSE-Strata - Latest Edition Available Now: https://freetorrent.dumpsmaterials.com/PSE-Strata-real-torrent.html
