Practice PSE-Strata Exam Online

Question 1

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

A : It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

B : It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

C : It can automatically create address groups for use with KVM.

D : It can bootstrap the virtual firewalls for dynamic deployment scenarios.

Answer: A,D

Question 2

Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)

A : Threat logs

B : WildFire analysis reports

C : Botnet reports

D : Data filtering logs

E : SaaS reports

Answer: B,C,D

Question 3

In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

A : HA3

B : HA1

C : HA2

D : HA4

Answer: C

Question 4

When having a customer pre-sales call, which aspects of the NGFW should be covered?

A : The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks

B : The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content --- malware, phishing, and C2 are updated every five minutes --- to ensure that you can manage access to these sites within minutes of categorization

C : The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor

D : Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing

Answer: D

Question 5

What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)

A : Next-generation firewalls deployed with WildFire Analysis Security Profiles

B : WF-500 configured as private clouds for privacy concerns

C : Correlation Objects generated by AutoFocus

D : Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance

E : Palo Alto Networks non-firewall products such as Traps and Prisma SaaS

Answer: A,C,D

Name:	Palo Alto Networks System Engineer - Strata
Exam Code:	PSE-Strata
Certification:	Palo Alto Networks Systems Engineer
Vendor:	Palo Alto Networks
Total Questions:	140
Last Updated:	Apr 23, 2024

Palo Alto Networks PSE-Strata