[Nov-2021] PSE-Strata Dumps Full Questions - Palo Alto Networks Systems Engineer Exam Study Guide
Exam Questions and Answers for PSE-Strata Study Guide
NEW QUESTION 39
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Quarantine
- B. Allow
- C. Alert
- D. Reset
- E. Redirect
- F. Drop
Answer: B,C,D,F
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 40
What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?
- A. There are no benefits other than slight performance upgrades
- B. It allows Palo Alto Networks to add new devices to existing hardware
- C. Only one processor is needed to complete all the functions within the box
- D. It allows Palo Alto Networks to add new functions to existing hardware
Answer: C
NEW QUESTION 41
A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)
- A. Collects forensic information about the event
- B. Notifies the user about the event
- C. Communicates the status of the endpoint to the ESM
- D. Informs WildFire and sends up a signature to the Cloud
- E. Remediates the event by deleting the malicious file
Answer: A,B,C
NEW QUESTION 42
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?
- A. depends on the Cortex Data Lake tier purchased
- B. 18 bytes
- C. 1500 bytes
- D. 8MB
Answer: C
Explanation:
Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVMCA0
NEW QUESTION 43
A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?
- A. PA-7000-20GQXM-NPC
- B. PA-7000-20GQ-NPC
- C. PA-7000-40G-NPC
- D. PA-7000-20G-NPC
Answer: A
NEW QUESTION 44
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?
- A. administrative Password
- B. secret access key
- C. AWS account ID
- D. access key ID
Answer: D
Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-prisma-saas/begin-scanning-an-amazon-s3-app.html
NEW QUESTION 45
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product?
(Choose two.)
- A. Policy match is based on application
- B. Traffic is separated by zones
- C. Identification of application is possible on any port
- D. Traffic control is based on IP port, and protocol
Answer: A,C
NEW QUESTION 46
What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)
- A. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS
- B. WF-500 configured as private clouds for privacy concerns
- C. Next-generation firewalls deployed with WildFire Analysis Security Profiles
- D. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
- E. Correlation Objects generated by AutoFocus
Answer: A,D,E
Explanation:
Explanation
https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus
NEW QUESTION 47
Which task would be identified in Best Practice Assessment tool?
- A. identify the threats associated with each application
- B. identify sanctioned and unsanctioned SaaS applications
- C. identify and provide recommendations for device management access
- D. identify the visibility and presence of command-and-control sessions
Answer: B
NEW QUESTION 48
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)
- A. Operator
- B. Attribute
- C. Connector
- D. Database
- E. Recipient
- F. Schedule
Answer: A,B,C
NEW QUESTION 49
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)
- A. Pathfinder
- B. Cortex Data Lake
- C. Traps
- D. Panorama
- E. NGFW with PANOS 8 0.5 or later
- F. Directory Syn Service
Answer: B,E,F
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-overview/cort
NEW QUESTION 50
A customer is concerned about zero-day targeted attacks against its intellectual property.
Which solution informs a customer whether an attack is specifically targeted at them?
- A. Panorama Correlation Report
- B. Firewall Botnet Report
- C. AutoFocus
- D. Traps TMS
Answer: B
NEW QUESTION 51
What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)
- A. help streamline the deployment and migration of NGFWs
- B. when client's want to see the power of the platform
- C. when you're delivering a security strategy
- D. provide users visibility into the applications currently allowed on the network
- E. assess the state of NGFW feature adoption
Answer: B,D,E
NEW QUESTION 52
There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?
- A. There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls
- B. The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama
- C. The push operation will fail regardless of an error or not within the configuration itself
- D. Provided there's no error within the configuration to be pushed, the push will succeed
Answer: C
NEW QUESTION 53
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)
- A. Monthly
- B. Daily
- C. Weekly
- D. Bi-weekly
Answer: B,C
NEW QUESTION 54
......
Palo Alto Networks System Engineer Professional - Strata Exam Free Update With 100% Exam Passing Guarantee: https://www.exam4free.com/PSE-Strata-valid-dumps.html
Real Exam Questions & Answers - Palo Alto Networks PSE-Strata Dump is Ready: https://drive.google.com/open?id=1NMoYRQ225bmzf8Jj77_lFhaYTsZJyGQJ
