[Dec-2021] Latest Palo Alto Networks PSE-Strata Certification Practice Test Questions
Verified PSE-Strata Dumps Q&As - 1 Year Free & Quickly Updates
NEW QUESTION 50
Which three features are used to prevent abuse of stolen credentials? (Choose three.)
- A. URL Filtering Profiles
- B. multi-factor authentication
- C. WildFire Profiles
- D. SSL decryption rules
- E. Prisma Access
Answer: B,C,D
NEW QUESTION 51
A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?
- A. URL Filtering Profile
- B. File Blocking Profile
- C. Vulnerability Protection Profile
- D. DoS Protection Profile
Answer: B
Explanation:
Reference:
%2Fknowledgebase.paloaltonetworks.com%2Fservlet%2FfileField%3FentityId%3Dka10g000000U0roAAC%26field%3DAttachment_1__Body__s&usg=AOvVaw3DCBM7-FwWInkWYANLrzUt (32)
NEW QUESTION 52
There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?
- A. There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls
- B. The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama
- C. The push operation will fail regardless of an error or not within the configuration itself
- D. Provided there's no error within the configuration to be pushed, the push will succeed
Answer: C
NEW QUESTION 53
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)
- A. Monthly
- B. Daily
- C. Weekly
- D. Bi-weekly
Answer: B
NEW QUESTION 54
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)
- A. Monthly
- B. Daily
- C. Weekly
- D. Bi-weekly
Answer: B,C
NEW QUESTION 55
Prisma SaaS provides which two SaaS threat prevention capabilities? (Choose two)
- A. shellcode protection
- B. SaaS AppID signatures
- C. remote procedural call (RPC) interrogation
- D. WildFire analysis
- E. file quarantine
Answer: B,D
NEW QUESTION 56
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report?
(Choose two.)
- A. Monthly
- B. Daily
- C. Weekly
- D. Bi-weekly
Answer: B,C
NEW QUESTION 57
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?
- A. administrative Password
- B. secret access key
- C. AWS account ID
- D. access key ID
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-p
NEW QUESTION 58
Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)
- A. a single pair of decryption forwarding interfaces
- B. a unique Decryption policy rule is required per security chain
- C. dedicated pair of decryption forwarding interfaces required per security chain
- D. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule
Answer: B,D
NEW QUESTION 59
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)
- A. TACACS
- B. Lotus Domino
- C. Active Directory monitoring
- D. SNMP server
- E. Client Probing
- F. RADIUS
- G. eDirectory monitoring
Answer: A,E,F
Explanation:
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id-concepts/user-mapping
NEW QUESTION 60
When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered? (Choose two.)
- A. Traps agent forensic data
- B. agent size and OS
- C. the number of Traps agents
- D. retention requirements
Answer: A,B
NEW QUESTION 61
What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)
- A. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS
- B. WF-500 configured as private clouds for privacy concerns
- C. Next-generation firewalls deployed with WildFire Analysis Security Profiles
- D. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
- E. Correlation Objects generated by AutoFocus
Answer: A,D,E
Explanation:
https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus
NEW QUESTION 62
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Quarantine
- B. Allow
- C. Alert
- D. Reset
- E. Redirect
- F. Drop
Answer: B,C,D,F
NEW QUESTION 63
When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered?
(Choose two.)
- A. Traps agent forensic data
- B. agent size and OS
- C. the number of Traps agents
- D. retention requirements
Answer: A,B
NEW QUESTION 64
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls?
(Choose three.)
- A. TACACS
- B. Lotus Domino
- C. Active Directory monitoring
- D. SNMP server
- E. Client Probing
- F. RADIUS
- G. eDirectory monitoring
Answer: A,E,F
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id-concepts/user-mapping
NEW QUESTION 65
Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?
- A. WildFire on the firewall, and AutoFocus on Panorama
- B. GlobalProtect on the firewall, and Threat Prevention on Panorama
- C. URL Filtering on the firewall, and MineMeld on Panorama
- D. Threat Prevention on the firewall, and Support on Panorama
Answer: D
NEW QUESTION 66
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?
- A. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)
- B. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)
- C. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)
- D. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)
Answer: B
NEW QUESTION 67
What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}
- A. prevention of cyber attacks
- B. safe enablement of all applications
- C. defense against threats with static security solution
- D. threat remediation
Answer: A,D
NEW QUESTION 68
Which three platform components can identify and protect against malicious email links? (Choose three.)
- A. WF-500
- B. WildFire hybrid cloud solution
- C. M-600
- D. WildFire public cloud
- E. M-200
Answer: A,D,E
NEW QUESTION 69
Which two products can send logs to the Cortex Data Lake? (Choose two.)
- A. AutoFocus
- B. Prisma Access
- C. PA-3260 firewall
- D. Prisma Public Cloud
Answer: B,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
NEW QUESTION 70
What are two advantages of the DNS Sinkholing feature? (Choose two.)
- A. It can be deployed independently of an Anti-Spyware Profile.
- B. It can work upstream from the internal DNS server.
- C. It forges DNS replies to known malicious domains.
- D. It monitors DNS requests passively for malware domains.
Answer: B,C
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing
NEW QUESTION 71
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. Zip
- B. ELF
- C. 7-Zip
- D. RAR
Answer: C,D
Explanation:
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
NEW QUESTION 72
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.
Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. HA active/passive
- B. HA active/active
- C. Virtual systems
- D. Policy-based forwarding
Answer: B,D
NEW QUESTION 73
......
Latest 2021 Realistic Verified PSE-Strata Dumps - 100% Free PSE-Strata Exam Dumps: https://www.examsreviews.com/PSE-Strata-pass4sure-exam-review.html
Get 2021 Updated Free Palo Alto Networks PSE-Strata Exam Questions & Answer: https://drive.google.com/open?id=1bK_P_z9Z-Jbr9wiyuMEogthSWQhv6JMF