Palo-Alto-Networks PSE-SASE Practice Exam Questions

Palo-Alto-Networks PSE-SASE Sample Question Answers

Question # 1

Which statement applies to Prisma Access licensing?

A. Internet of Things (LOT) Security is included with each license.
B. It provides cloud-based, centralized log storage and aggregation.
C. It is a perpetual license required to enable support for multiple virtual systems on PA-3200 Series firewalls.
D. For remote network and Clean Pipe deployments, a unit is defined as 1 Mbps of bandwidth.

Show Answer

Question # 2

Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?

A. >show sdwan connection all |
B. >show sdwan session distribution policy-name
C. >show sdwan path-monitor stats vif
D. >show sdwan event

Show Answer

Question # 3

Which element of a secure access service edge (SASE)-enabled network uses many points of presence to reduce latency with support of in-country or in-region resources and regulatory requirements?

A. cloud-native, cloud-based delivery
B. converged WAN edge and network security
C. broad network-edge support
D. identity and network location

Show Answer

Question # 4

Which connection method allows secure web gateway (SWG) access to internet-based SaaS applications using HTTP and   HTTPS protocols?

A. GlobalProtect
B. Broker VM
C. explicit proxy
D. system-wide proxy

Show Answer

Question # 5

What is feature of Autonomous Digital Experience Management (ADEM)?

A. It applies configuration changes and provides credential management, role-based controls, and a playbook repository.  
B. It provides customized forms to collect and validate necessary parameters from the requester.
C. It natively ingests, normalizes, and integrates granular data across the security infrastructure at nearly half the cost oflegacy security products attempting to solve the problem. 
D. It provides IT teams with single-pane visibility that leverages endpoint, simulated, and real-time user traffic data toprovide the most complete picture of user traffic flows possible.

Show Answer

Question # 6

Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)

A. unknown-tep
B. private
C. web-browsing
D. custom

Show Answer

Question # 7

Which two actions take place after Prisma SD-WAN Instant-On Network (LON) devices have been deployed at a site? (Choose two.)

A. The devices continually sync the information from directories, whether they are on-premise, cloud-based, or hybrid.
B. The devices establish VPNs over private WAN circuits that share a common service provider.
C. The devices automatically establish a VPN to the data centers over every internet circuit.
D. The devices provide an abstraction layer between the Prisma SD-WAN controller and a particular cloud service.

Show Answer

Question # 8

What are two benefits provided to an organization using a secure web gateway (SWG)? (Choose two.)

A. VPNs remain connected, reducing user risk exposure.
B. Security policies for making internet access safer are enforced.
C. Access to inappropriate websites or content is blocked based on acceptable use policies.
D. An encrypted challenge-response mechanism obtains user credentials from the browser.

Show Answer

Question # 9

Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.Which proxy should be used to decrypt this traffic?

A. SCP Proxy
B. SSL Inbound Proxy
C. SSH Forward Proxy
D. SSL Forward Proxy

Show Answer

Question # 10

Which product enables organizations to open unknown files in a sandbox environment and scan them for malware or otherthreats?

A. network sandbox
B. SD-WAN
C. cloud access security broker (CASB)
D. remote browser isolation

Show Answer