[Jun-2024] PSE-Strata exam torrent Palo Alto Networks study guide
Use Valid New PSE-Strata Test Notes & PSE-Strata Valid Exam Guide
NEW QUESTION # 29
Which two actions can be configured in an Anti-Spyware profile to address command-and-control (C2) traffic from compromised hosts? (Choose two.)
- A. Reset
- B. Redirect
- C. Alert
- D. Quarantine
Answer: A,C
NEW QUESTION # 30
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?
- A. Once every minute
- B. Once an hour
- C. Once a week
- D. Once a day
Answer: C
NEW QUESTION # 31
Which task would be included in the Best Practice Assessment (BPA) tool?
- A. Identify sanctioned and unsanctioned software-as-a-service (SaaS) applications.
- B. Identify the visibility and presence of command-and-control (C2) sessions.
- C. Identify and provide recommendations for device configurations.
- D. Identify the threats associated with each application.
Answer: C
NEW QUESTION # 32
A company has deployed the following
* VM-300 firewalls in AWS
* endpoint protection with the Traps Management Service
* a Panorama M-200 for managing its VM-Series firewalls
* PA-5220s for its internet perimeter,
* Prisma SaaS for SaaS security.
Which two products can send logs to the Cortex Data Lake? (Choose two).
- A. Traps Management Service
- B. Panorama M-200 appliance
- C. Prisma SaaS
- D. VM-300 firewalls
Answer: B,D
NEW QUESTION # 33
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?
- A. secret access key
- B. administrative Password
- C. AWS account ID
- D. access key ID
Answer: D
Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-prisma-saas/begin-scanning-an-amazon-s3-app.html
NEW QUESTION # 34
What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)
- A. It can manage the virtual firewalls' resource use, allowing for VM resource over-subscription.
- B. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.
- C. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support
- D. It can bootstrap the virtual firewall for dynamic deployment scenarios
Answer: C,D
NEW QUESTION # 35
How do you configure the rate of file submissions to WildFire in the NGFW?
- A. QoS tagging
- B. based on the purchased license uploaded
- C. maximum number of files per minute
- D. maximum number of files per day
Answer: C
Explanation:
https://www.paloaltonetworks.com/documentation/80/wildfire/wf_admin/submit-files-for-wildfire-analysis/firewall-file-forwarding-capacity-by-model
NEW QUESTION # 36
WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through.
Which command returns a valid result to verify the ML is working from the command line.
- A. show wfml cloud-status
- B. show ml cloud-status
- C. show av cloud-status
- D. show mlav cloud-status
Answer: D
NEW QUESTION # 37
Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)
- A. Ensure throughput is not an issue
- B. Deploy decryption setting all at one time
- C. Exclude certain types of traffic in decryption policy
- D. Include all traffic types in decryption policy
- E. Inability to access websites
Answer: C,D,E
NEW QUESTION # 38
What component is needed if there is a large scale deployment of Next Generation Firewalls with multiple Panorama Management Servers?
- A. Panorama Interconnect Plugin
- B. Palo Alto Networks Cluster License
- C. M-600 Appliance
- D. Panorama Large Scale VPN Plugin
Answer: A
Explanation:
https://savantsolutions.net/wp-content/uploads/woocommerce_uploads/2019/05/pcnse-study- guide-v9.pdf (27)
NEW QUESTION # 39
What are two advantages of the DNS Sinkholing feature? (Choose two.)
- A. It can be deployed independently of an Anti-Spyware Profile.
- B. It forges DNS replies to known malicious domains.
- C. It can work upstream from the internal DNS server.
- D. It monitors DNS requests passively for malware domains.
Answer: B,C
NEW QUESTION # 40
What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)
- A. It should be led by Palo Alto Network employees.
- B. It should be used to demonstrate the power of the platform.
- C. The required equipment should be shipped to lab site in advance.
- D. It should be used to create pipeline and customer interest.
- E. The lab documentation should be reviewed and tested.
Answer: B,D,E
NEW QUESTION # 41
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?
- A. An antivirus profile to security policy rules that deny general web access
- B. A zone protection profile to the untrust zone
- C. A file blocking profile to security policy rules that allow general web access
- D. A vulnerability profile to security policy rules that deny general web access
Answer: C
Explanation:
https://docs.paloaltonetworks.com/best-practices/8-1/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/create-best-practice-security-profiles.html
NEW QUESTION # 42
Which two of the following does decryption broker provide on a NGFW? (Choose two.)
- A. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
- B. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
- C. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
- D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times
Answer: C,D
NEW QUESTION # 43
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category.
Which two timeframe options are available to send this report? (Choose two.)
- A. Monthly
- B. Bi-weekly
- C. Weekly
- D. Daily
Answer: C,D
NEW QUESTION # 44
What two types of certificates are used to configure SSL Forward Proxy? (Сhoose two.)
- A. Self-Signed certificates
- B. Private key certificates
- C. Intermediate certificates
- D. Enterprise CA-signed certificates
Answer: A,D
Explanation:
Reference:
%20certificate.&text=Certificate%20Name-,.,unique%20name%20for%20each%20firewall
NEW QUESTION # 45
......
PSE-Strata Exam questions and answers: https://pdfvce.trainingdumps.com/PSE-Strata-valid-vce-dumps.html
