Latest [Nov 02, 2024] PSE-Strata Exam Questions – Valid PSE-Strata Dumps Pdf [Q77-Q96]

November 2, 2024 PSE-Strata, Palo Alto Networks 0 Comments

Latest [Nov 02, 2024] PSE-Strata Exam Questions – Valid PSE-Strata Dumps Pdf [Q77-Q96]

Rate this post

Latest [Nov 02, 2024] PSE-Strata Exam Questions – Valid PSE-Strata Dumps Pdf

PSE-Strata Practice Test Questions Answers Updated 141 Questions

Palo Alto Networks PSE-Strata (Palo Alto Networks System Engineer Professional – Strata) Exam is a certification exam designed to validate the knowledge and skills of network security professionals in designing, deploying, configuring, and managing the Palo Alto Networks Next-Generation Firewalls. The PSE-Strata exam is intended for individuals who are involved in the implementation and support of Palo Alto Networks solutions, including system engineers, support engineers, and technical account managers.

The PSE-Strata certification exam is designed to validate the skills and knowledge of professionals who are responsible for designing, implementing, and managing Palo Alto Networks security solutions. Palo Alto Networks System Engineer Professional – Strata Exam certification exam is divided into multiple sections that cover various aspects of network security, including network design, security policies, and threat prevention. PSE-Strata exam is designed to test the candidates’ understanding of the Palo Alto Networks platform and their ability to apply this knowledge to real-world scenarios.

NO.77 Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

use of decryption policies

measure the adoption of URL filters. App-ID. User-ID

use of device management access and settings

expose the visibility and presence of command-and-control sessions

identify sanctioned and unsanctioned SaaS applications

NO.78 How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?

Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)

Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)

Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)

Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic-content-updates.html

NO.79 Which two steps are required to configure the Decryption Broker? (Choose two.)

reboot the firewall to activate the license

activate the Decryption Broker license

enable SSL Forward Proxy decryption

enable a pair of virtual wire interfaces to forward decrypted traffic

NO.80 Which two types of security chains are supported by the Decryption Broker? (Choose two.)

virtual wire

transparent bridge

Layer 3

Layer 2

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-broker/decryption-broker-concepts/decryption-broker-security-chains-multiple.html

NO.81 Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

Quarantine

Allow

Reset

Redirect

Drop

Alert

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html

NO.82 Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls?
(Choose three.)

eDirectory monitoring

Client Probing

SNMP server

TACACS

Active Directory monitoring

Lotus Domino

RADIUS

Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id-concepts/user-mapping

NO.83 An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)

Daily

Monthly

Weekly

Bi-weekly

NO.84 What is the key benefit of Palo Alto Networks single-pass architecture (SPA) design?

It requires only one processor to complete all the functions within the box.

It allows the addition of new functions to existing hardware without affecting performance.

It allows the addition of new devices to existing hardware without affecting performance.

It decodes each network flow multiple times, therefore reducing throughput.

NO.85 Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

Include all traffic types in decryption policy

Inability to access websites

Exclude certain types of traffic in decryption policy

Deploy decryption setting all at one time

Ensure throughput is not an issue

Before implementing a decryption policy on Next-Generation Firewalls (NGFW), it is essential to consider the potential inability to access some websites due to issues like certificate pinning or incompatibility. Excluding certain types of traffic (e.g., financial or healthcare) from decryption can avoid legal and privacy issues.
Ensuring that the firewall’s throughput can handle the additional load from decrypting traffic is critical to maintain network performance and avoid bottlenecks.
References:
* Palo Alto Networks’ SSL Decryption Best Practices
* GDPR (General Data Protection Regulation) considerations for traffic inspection
* Network performance guidelines from various cybersecurity standards bodies

NO.86 What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}

prevention of cyber attacks

safe enablement of all applications

threat remediation

defense against threats with static security solution

The core values of the Palo Alto Network Security Operating Platform revolve around:
* Prevention of cyber attacks: This is achieved through a multi-layered approach combining advanced threat intelligence, machine learning, and behavioral analytics to proactively block known and unknown threats across the network, cloud, and endpoints.
* Safe enablement of all applications: The platform is designed to provide comprehensive visibility and control over all applications within an organization. This ensures that applications can be securely
* accessed and used without compromising on security, facilitating business operations and productivity (Palo Alto Networks) (Palo Alto Networks).

NO.87 What helps avoid split brain in active / passive high availability (HA) pair deployment?

Enable preemption on both firewalls in the HA pair.

Use a standard traffic interface as the HA3 link.

Use the management interface as the HA1 backup link

Use a standard traffic interface as the HA2 backup

To avoid split-brain scenarios in an active/passive high availability (HA) pair deployment, it is essential to ensure reliable communication between the HA peers. Using the management interface as the HA1 backup link provides an additional communication path between the firewalls, ensuring they can synchronize state information and avoid scenarios where both units assume the active role due to a communication failure.

NO.88 Which three of the following actions must be taken to enable Credential Phishing Prevention? (Choose three.)

Enable User Credential Detection

Enable User-ID

Define a Secure Sockets Layer (SSL) decryption rule base

Enable App-ID

Define a uniform resource locator (URL) Filtering profile

To enable Credential Phishing Prevention on a Palo Alto Networks firewall, several actions need to be taken to detect and block phishing attempts effectively.
* Enable User Credential Detection: This is crucial for identifying when user credentials are being sent to potentially malicious or unknown sites.
* Enable User-ID: This feature maps IP addresses to user identities, which is necessary for identifying which user credentials are being used and applying relevant security policies.
* Define a URL Filtering profile: This profile allows the firewall to inspect and control web traffic, blocking access to phishing sites and other malicious URLs.

NO.89 Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer’s current security posture?

BPA

PPA

Expedition

SLR

The Security Lifecycle Review (SLR) is a pre-sales tool used by Palo Alto Networks that involves an in-depth interview, typically lasting around 4 hours, to assess a customer’s current security posture. The SLR provides a comprehensive review of the security measures in place, identifies potential gaps, and offers recommendations for improvements. This tool helps organizations understand their security environment and make informed decisions about enhancing their security infrastructure.
References: Palo Alto Networks SLR documentation.

NO.90 Which two components must be configured within User-ID on a new firewall that has been implemented?
(Choose two.)

User Mapping

Proxy Authentication

Group Mapping

802.1X Authentication

Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id

NO.91 Which variable is used to regulate the rate of file submission to WildFire?

Based on the purchase license

Maximum number of files per minute

Available bandwidth

Maximum number of files per day

https://www.paloaltonetworks.com/documentation/80/wildfire/wf_admin/submit-files-for-wildfire- analysis/ firewall-file-forwarding-capacity-by-model

NO.92 Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

NO.93 Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

WildFire hybrid deployment

5 minute WildFire updates to threat signatures

Access to the WildFire API

PE file upload to WildFire

NO.94 Which Security profile on the Next-Generation Firewall (NGFW) includes Signatures to protect against brute force attacks?

Vulnerability Protection profile

Antivirus profile