Palo-Alto-Networks PSE-Strata Practice Exam Questions

Palo-Alto-Networks PSE-Strata Sample Question Answers

Question # 1

WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile andadded to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, anattempt to download the test file is allowed through.Which command returns a valid result to verify the ML is working from the command line.

A. show wfml cloud-status
B. show mlav cloud-status
C. show ml cloud-status
D. show av cloud-status

Show Answer

Question # 2

Which solution informs a customer concerned about zero-day targeted attacks whether an attack is specifically targeted at its property?

A. AutoFocus
B. Panorama Correlation Report
C. Cortex XSOAR Community edition
D. Cortex XDR Prevent

Show Answer

Question # 3

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domaingeneration algorithms (DGAS).Which Security profile is used to configure Domain Name Security (DNS) to Identity and blockpreviously unknown DGA-based threats in real time?

A. URL Filtering profile
B. WildFire Analysis profile
C. Vulnerability Protection profile
D. Anti-Spyware profile

Show Answer

Question # 4

Within the Five-Step Methodology of Zero Trust, in which step would application access and user access be defined?

A. Step 3: Architect a Zero Trust Network
B. Step 5. Monitor and Maintain the Network
C. Step 4: Create the Zero Trust Policy
D. Step 1: Define the Protect Surface
E. Step 2 Map the Protect Surface Transaction Flows

Show Answer

Question # 5

Which CLI command allows visibility into SD-WAN events such as path Selection and path quality measurements?

A. >show sdwan path-monitor stats vif
B. >show sdwan session distribution policy-name
C. >show sdwan connection all
D. >show sdwan event

Show Answer

Question # 6

Which component is needed for a large-scale deployment of NGFWs with multiple Panorama Management Servers?

A. M-600 appliance
B. Panorama Interconnect plugin
C. Panorama Large Scale VPN (LSVPN) plugin
D. Palo Alto Networks Cluster license

Show Answer

Question # 7

Which three actions should be taken before deploying a firewall evaluation unt in a customer environment? (Choose three.)

A. Request that the customer make part 3978 available to allow the evaluation unit to communicate with Panorama
B. Inform the customer that a SPAN port must be provided for the evaluation unit, assuming a TAP mode deployment.
C. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.
D. Set expectations for information being presented in the Security Lifecycle Review (SLR) because personal user information will be made visible
E. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed

Show Answer

Question # 8

Which two features can be enabled to support asymmetric routing with redundancy on a PaloAlto networks next-generation firewall (NGFW)? (Choose two.)

A. Active / active high availability (HA)
B. Multiple virtual systems
C. non-SYN first packet
D. Asymmetric routing profile

Show Answer

Question # 9

Access to a business site is blocked by URL Filtering inline machine learning (ML) andconsidered as a false-positive.How should the site be made available?

A. Disable URL Filtering inline ML
B. Create a custom URL category and add it to the Security policy
C. Create a custom URL category and add it on exception of the inline ML profile
D. Change the action of real-time detection category on URL filtering profile

Show Answer

Question # 10

A Fortune 500 customer has expressed interest in purchasing WildFire; however, they do not want to senddiscovered malware outside of their network.Which version of WildFire will meet this customer’s requirements?

A. WildFire Private Cloud
B. WildFire Government Cloud
C. WildFire Secure Cloud
D. WildFire Public Cloud

Show Answer