Winter Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: dumps65

Paloalto Networks PSE-Strata-Associate Dumps

Palo Alto Networks Systems Engineer (PSE) - Strata Associate Questions and Answers

Question 1

A firewall enabled as a decryption broker will take which of the following actions?

Options:

A.

forward clear text traffic to security chains for additional enforcement

B.

monitor the state of active connections to determine which network packets to allow through

C.

correlate a series of related threat events that indicate a likely compromised host on the network

D.

identify potential denial-of-service (DoS) attacks and take protective action

Question 2

Which subscription should be activated when a predefined, known malicious IP address is updated?

Options:

A.

WildFire

B.

Cortex Data Lake

C.

Threat Prevention

D.

URL Filtering

Question 3

Which deployment method is used to integrate a firewall to be inline in an existing network but does not support additional routing or switching?

Options:

A.

virtual wire

B.

TAP mode

C.

Layer 3

D.

Layer 2

Question 4

Which Palo Alto Networks product offers a centrally managed firewall update process?

Options:

A.

SD_WAN

B.

Prisma SaaS

C.

Panorama

D.

WildFire

Question 5

Which section of a Security Lifecycle Review (SLR) report summarizes risk exposure by breaking down a detected attack on the network?

Options:

A.

Advanced URL Filtering Analysis

B.

SaaS Applications

C.

Threats at a Glance

D.

Applications that Introduce Risk

Question 6

The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?

Options:

A.

LLDP profiles

B.

security zones

C.

DHCP groups

D.

security profile groups

Question 7

Which of the following statements applies to enabling App-ID on a Next-Generation Firewall (NGFW)?

Options:

A.

No additional purchase is required, but App-ID must be enabled for the customer to use it.

B.

An App-ID subscription must be purchased and enabled.

C.

No configuration is required, because App-ID is always enabled by default.

D.

A Threat Protection license must be purchased and enabled.

Question 8

Which of the following statements applies to WildFire Public Cloud verdicts?

Options:

A.

They are unique to the affected Next-Generation Firewall (NGFW).

B.

They are shared globally with all WildFire customers.

C.

They must be manually downloaded from the WildFire portal.

D.

They are automatically shared with third-party firewall vendors.

Question 9

A customer interested in Panorama is concerned about managing multiple firewalls they are putting in place globally. Each location has its own IP addresses, zones, and VPN configurations.

Which element of Panorama will assist the customer in pushing this unique configuration information to the individual firewalls?

Options:

A.

device profile

B.

GlobalProtect

C.

templates

D.

device groups

Question 10

What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

Options:

A.

tech support file

B.

Panorama plugin registration file

C.

stats dump file

D.

system process core file

Page: 1 / 4
Total 35 questions