Palo-Alto-Networks PSE-Platform Practice Exam Questions

Palo-Alto-Networks PSE-Platform Sample Question Answers

Question # 1

Which Palo Alto Networks security platform component should an administrator use to extend policies toremote users are not connecting to the internet from behind a firewall?

A. Threat Intelligence Cloud
B. Traps
C. GlobalProtect
D. Aperture

Show Answer

Question # 2

A customer is concerned about malicious activity occurring directly on their endpoints and not visible to theirfirewalls.Which three actions does Traps execute during a security event beyond ensuring the prevention of thisactivity? (Choose three.)

A. Informs WildFire and sends up a signature to the Cloud
B. Collects forensic information about the event
C. Communicates the status of the endpoint to the ESM
D.. Notifies the user about the event
E. Remediates the event by deleting the malicious file

Show Answer

Question # 3

A client chooses to not block uncategorized websites.Which two additions should be made to help provide some protection? (Choose two.)

A. A security policy rule using only known URL categories with the action set to allow
B. A file blocking profile to security policy rules that allow uncategorized websites to help reduce the riskof drive by downloads
C. A URL filtering profile with the action set to continue for unknown URL categories to security policyrules that allow web access
D. A data filtering profile with a custom data pattern to security policy rules that deny uncategorizedwebsites

Show Answer

Question # 4

How does SSL Forward Proxy decryption work?

A. SSL Forward Proxy decryption policy decrypts and inspects SSL/TLS traffic from internal users to theweb.
B. The SSL Forward Proxy Firewall creates a certificate intended for the client that is intercepted andaltered by the firewall.
C. If the server's certificate is signed by a CA that the firewall does not trust, the firewall will use thecertificate only on Forward Trust.
D. The firewall resides between the internal client and internal server to intercept traffic between the two.

Show Answer

Question # 5

Which two designs require virtual systems? (Choose two.)

A. A shared gateway interface that does not need a full administrative boundary
B. A virtual router as a replacement for an internet-facing router
C. A single physical firewall shared by different organizations, each with unique traffic control needs
D. A VMware NSX deployment that needs micros segmentation

Show Answer

Question # 6

Which two components must to be configured within User-ID on a new firewall that has been implemented?(Choose two.)

A. Group Mapping
B. 802.1X Authentication
C. Proxy Authentication
D. User mapping

Show Answer

Question # 7

What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)

A. It should be used to create pipeline and customer interest.
B. It should be used to demonstrate the power of the platform.
C. The lab documentation should be reviewed and tested.
D. It should be led by Palo Alto Network employees.
E. The required equipment should be shipped to lab site in advance.

Show Answer

Question # 8

A customer is adopting Microsoft Office 365 but is concerned about the potential security exposure that such amove could mean. The security analyst suggests using Aperture and the Palo Alto Network firewall together toprovide data and network security.What are the two reasons this solution has been suggested? (Choose two.)

A. The firewall secures data in transit between the network and the cloud.
B. Aperture prevents users from using non-sanctioned SaaS applications.
C. The firewall scans data that resides in the cloud for malware.
D. Aperture scans data that resides in the cloud for sensitive information.

Show Answer

Question # 9

Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls?(Choose three.)

A. Client Probing
B. TACACS
C. eDirectory monitoring
D. SNMP server
E. Lotus Domino
F. RADIUS
G. Active Directory monitoring

Show Answer

Question # 10

What is the HA limitation specific to the PA-200 appliance?

A. Can be deployed in either an active/passive or active/active HA pair
B. Can only synchronize configurations and does not support session synchronization
C. Has a dedicated HA1 and HA2 ports, but no HA3
D. Is the only Palo Alto Networks firewall that does not have any HA capabilities

Show Answer