Palo Alto Networks PSE Strata Free Updated Dumps

dumps2021-09-29T07:54:05+08:00

PSE Strata Palo Alto Networks updated dumps are available online. Use the updated PSE Strata exam dumps to prepare and pass PSE Strata exam in the first attempt. Palo Alto Networks System Engineer Professional-Strata PSE Strata updated dumps can save much of your time. Free Palo Alto Networks PSE Strata exam updated dumps are available below.

Page 1 of 2

1. What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)

Benign

Spyware

Malicious

Phishing

Grayware

2. A customer requests that a known spyware threat signature be triggered based on a rate of

occurrence, for example, 10 hits in 5 seconds.

How is this goal accomplished?

Create a custom spyware signature matching the known signature with the time attribute

Add a correlation object that tracks the occurrences and triggers above the desired threshold

Submit a request to Palo Alto Networks to change the behavior at the next update

Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

3. Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

Connector

Database

Recipient

Operator

Attribute

Schedule

4. There are different Master Keys on Panorama and managed firewalls.

What is the result if a Panorama Administrator pushes configuration to managed firewalls?

The push operation will fail regardless of an error or not within the configuration itself

Provided there’s no error within the configuration to be pushed, the push will succeed

The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

5. An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address

Which mechanism prevents this connection from succeeding?

DNS Sinkholing

DNS Proxy

Anti-Spyware Signatures

Wildfire Analysis

6. What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)

when you're delivering a security strategy

when client's want to see the power of the platform

provide users visibility into the applications currently allowed on the network

help streamline the deployment and migration of NGFWs

assess the state of NGFW feature adoption

7. In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)

TXT

API

CSV

EDL

8. How do you configure the rate of file submissions to WildFire in the NGFW?

based on the purchased license uploaded

QoS tagging

maximum number of files per minute

maximum number of files per day

9. The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security.

The firewall provides which three types of reports? (Choose three.)

SNMP Reports

PDF Summary Reports

Netflow Reports

Botnet Reports

User or Group Activity Reports

10. An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites .

How should the SE show the customer the firewall can detect that these websites are being accessed?

Create a footnote within the SLR generation tool

Edit the Key-Findings text to list the other types of categories that may be of interest

Remove unwanted categories listed under 'High Risk' and use relevant information

Produce the report and edit the PDF manually

11. What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

It can automatically create address groups for use with KV

It can bootstrap the virtual firewalls for dynamic deployment scenarios.

12. As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

access key ID

secret access key

administrative Password

AWS account ID

13. A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today's security infrastructure.

Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?

SP3 (Single Pass Parallel Processing)

GlobalProtect

Threat Prevention

Elastic Load Balancers

14. A customer is concerned about zero-day targeted attacks against its intellectual property.

Which solution informs a customer whether an attack is specifically targeted at them?

Traps TMS

AutoFocus

Panorama Correlation Report

Firewall Botnet Report

15. Which three platform components can identify and protect against malicious email links? (Choose three.)

WildFire hybrid cloud solution

WildFire public cloud

WF-500

M-200

M-600

16. WildFire subscription supports analysis of which three types? (Choose three.)

GIF

7-Zip

Flash

RPM

ISO

DMG

17. XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy .

Which two features must be enabled to meet the customer's requirements? (Choose two.)

Policy-based forwarding

HA active/active

Virtual systems

HA active/passive

18. When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

8MB

depends on the Cortex Data Lake tier purchased

18 bytes

1500 bytes

19. A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.

Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

Informs WildFire and sends up a signature to the Cloud

Collects forensic information about the event

Communicates the status of the endpoint to the ESM

Notifies the user about the event

Remediates the event by deleting the malicious file

20. Which are the three mandatory components needed to run Cortex XDR? (Choose three.)

Panorama

NGFW with PANOS 8 0.5 or later

Cortex Data Lake

Traps

Pathfinder

Directory Syn Service

Page 2 of 2

21. For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single

Datacenter? (Choose two.)

Network segments in the Datacenter need to be advertised to only one Service Connection

The customer edge device needs to support policy-based routing with symmetric return functionality

The resources in the Datacenter will only be able to reach remote network resources that share the same region

A maximum of four service connections per Datacenter are supported with this topology

22. A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default .

What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports.

Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.

Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis.

Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default.

23. Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

Identified vulnerability exploits

Launch of an identified malware executable file

Endpoints access files from a removable drive

Suspicious host behavior

24. Which two steps are required to configure the Decryption Broker? (Choose two.)

reboot the firewall to activate the license

activate the Decryption Broker license

enable SSL Forward Proxy decryption

enable a pair of virtual wire interfaces to forward decrypted traffic

25. Decryption port mirroring is now supported on which platform?

all hardware-based and VM-Series firewalls with the exception of VMware NS

Citrix SDX, or public cloud hypervisors

in hardware only

only one the PA-5000 Series and higher

all hardware-based and VM-Series firewalls regardless of where installed

26. Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

Prototype

Inputs

Class

Feed Base URL

27. Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

28. How frequently do WildFire signatures move into the antivirus database?

every 24 hours

every 12 hours

once a week

every 1 hour

29. Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25

5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

30. Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

M-200

M-600

M-100

Panorama VM-Series

31. A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.

Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?

The Automated Correlation Engine

Cortex XDR and Cortex Data Lake

WildFire with API calls for automation

3rd Party SIEM which can ingest NGFW logs and perform event correlation

32. Which security profile on the NGFW includes signatures to protect you from brute force attacks?

Zone Protection Profile

URL Filtering Profile

Vulnerability Protection Profile

Anti-Spyware Profile

33. Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

Quarantine

Allow

Reset

Redirect

Drop

Alert

34. What action would address the sub-optimal traffic path shown in the figure?

Key:

RN - Remote Network

SC - Service Connection

MU GW - Mobile User Gateway

Onboard a Service Connection in the Americas region

Remove the Service Connection in the EMEA region

Onboard a Service Connection in the APAC region

Onboard a Remote Network location in the EMEA region

35. XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer’s requirements? (Choose two.)

Virtual systems

HA active/active

HA active/passive

Policy-based forwarding

36. Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

eDirectory monitoring

Client Probing

SNMP server

TACACS

Active Directory monitoring

Lotus Domino

RADIUS

Palo Alto Networks PSE Strata Free Updated Dumps

Palo Alto Networks PSE Strata Free Updated Dumps

Share this post

Leave a Reply Cancel reply

Related Posts