2022 Updated Verified Pass PSE-Strata Exam - Real Questions and Answers
Dumps Moneyack Guarantee - PSE-Strata Dumps Approved Dumps
NEW QUESTION 54
A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?
- A. Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports.
- B. Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default.
- C. Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis.
- D. Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.
Answer: C
NEW QUESTION 55
Which security profile on the NGFW includes signatures to protect you from brute force attacks?
- A. Vulnerability Protection Profile
- B. Anti-Spyware Profile
- C. URL Filtering Profile
- D. Zone Protection Profile
Answer: A
NEW QUESTION 56
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION 57
A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.
Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?
- A. The Automated Correlation Engine
- B. 3rd Party SIEM which can ingest NGFW logs and perform event correlation
- C. Cortex XDR and Cortex Data Lake
- D. WildFire with API calls for automation
Answer: A
NEW QUESTION 58
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?
- A. Panorama VM-Series
- B. M-200
- C. M-100
- D. M-600
Answer: A
NEW QUESTION 59
Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- A. Layer 3
- B. transparent bridge
- C. Layer 2
- D. virtual wire
Answer: A,B
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-broker/decryption-broker-con
NEW QUESTION 60
When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered? (Choose two.)
- A. agent size and OS
- B. retention requirements
- C. the number of Traps agents
- D. Traps agent forensic data
Answer: A,D
NEW QUESTION 61
How frequently do WildFire signatures move into the antivirus database?
- A. every 24 hours
- B. every 1 hour
- C. every 12 hours
- D. once a week
Answer: A
NEW QUESTION 62
What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)
- A. Spyware
- B. Phishing
- C. Grayware
- D. Malicious
- E. Benign
Answer: B,C,D,E
NEW QUESTION 63
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?
- A. access key ID
- B. secret access key
- C. administrative Password
- D. AWS account ID
Answer: A
NEW QUESTION 64
An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?
- A. Create a footnote within the SLR generation tool
- B. Produce the report and edit the PDF manually
- C. Remove unwanted categories listed under 'High Risk' and use relevant information
- D. Edit the Key-Findings text to list the other types of categories that may be of interest
Answer: C
NEW QUESTION 65
What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)
- A. WF-500 configured as private clouds for privacy concerns
- B. Next-generation firewalls deployed with WildFire Analysis Security Profiles
- C. Correlation Objects generated by AutoFocus
- D. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
- E. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS
Answer: C,D,E
Explanation:
Explanation
https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus
NEW QUESTION 66
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. ELF
- B. RAR
- C. 7-Zip
- D. Zip
Answer: B,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
NEW QUESTION 67
Which two components must be configured within User-ID on a new firewall that has been implemented?
(Choose two.)
- A. Proxy Authentication
- B. Group Mapping
- C. User Mapping
- D. 802.1X Authentication
Answer: B,C
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id
NEW QUESTION 68
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?
- A. access key ID
- B. secret access key
- C. administrative Password
- D. AWS account ID
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-p
NEW QUESTION 69
How do you configure the rate of file submissions to WildFire in the NGFW?
- A. maximum number of files per day
- B. QoS tagging
- C. maximum number of files per minute
- D. based on the purchased license uploaded
Answer: C
Explanation:
https://www.paloaltonetworks.com/documentation/80/wildfire/wf_admin/submit-files-for-wildfire-analysis/firewall-file-forwarding-capacity-by-model
NEW QUESTION 70
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. Virtual systems
- B. HA active/passive
- C. Policy-based forwarding
- D. HA active/active
Answer: C,D
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/route-based-redundancy
NEW QUESTION 71
Which three signature-based Threat Prevention features of the firewall are informed by intelligence from the Threat Intelligence Cloud? (Choose three.)
- A. Botnet detection
- B. Anti-Spyware
- C. App-ID protection
- D. Vulnerability protection
- E. Anti-Virus
Answer: B,C,D
NEW QUESTION 72
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. Virtual systems
- B. HA active/passive
- C. Policy-based forwarding
- D. HA active/active
Answer: C,D
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/route-based-redundancy
NEW QUESTION 73
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)
- A. Policy match is based on application
- B. Traffic control is based on IP port, and protocol
- C. Identification of application is possible on any port
- D. Traffic is separated by zones
Answer: A,C
NEW QUESTION 74
......
Updated PDF (New 2022) Actual Palo Alto Networks PSE-Strata Exam Questions: https://passleader.briandumpsprep.com/PSE-Strata-prep-exam-braindumps.html
