Dec 17, 2022 Detailed New PSE-Strata Exam Questions for Concept Clearance [Q80-Q96]

QUESTION 80
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)

B)

C)

D)

QUESTION 81
A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture.
What are two steps in this process? (Choose two.)

QUESTION 82
Which two features are found in a next-generation firewall but are absent in a legacy firewall product? (Choose two)

QUESTION 83
A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

QUESTION 84
Which built-in feature of PAN-OS allows the NGFW administrator to create a policy that provides autoremediation for anomalous user behavior and malicious activity while maintaining user visibility?

QUESTION 85
A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).
Which Security profile is used to configure Domain Name Security (DNS) to Identity and block previously unknown DGA-based threats in real time?

QUESTION 86
Drag and Drop Question
Match the functions to the appropriate processing engine within the dataplane.

QUESTION 87
A price sensitive customer wants to prevent attacks on a windows 2008 Virtual Server. The server will max out at 100Mbps but needs to have 45,000 sessions to connect to multiple hosts within a data center.
Which VM instance should be used to secure the network by this customer?

QUESTION 88
WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through.
Which command returns a valid result to verify the ML is working from the command line.

QUESTION 89
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer’s requirements? (Choose two.)

QUESTION 90
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

QUESTION 91
Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

QUESTION 92
Which two tabs in Panorama can be used to identify templates to define a common base configuration?
(Choose two.)

QUESTION 93
What helps avoid split brain in active / passive high availability (HA) pair deployment?

QUESTION 94
What is the basis for purchasing Cortex XDR licensing?

QUESTION 95
What two types of certificates are used to configure SSL Forward Proxy? (Сhoose two.)

QUESTION 96
Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?