[Jan 03, 2022] Get Free Updates Up to 365 days On Developing PSE-Strata Braindumps
Best Quality Palo Alto Networks PSE-Strata Exam Questions
NEW QUESTION 21
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Reset
- B. Quarantine
- C. Allow
- D. Redirect
- E. Drop
- F. Alert
Answer: A,C,E,F
NEW QUESTION 22
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION 23
Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?
- A. WildFire hybrid deployment
- B. Access to the WildFire API
- C. 5 minute WildFire updates to threat signatures
- D. PE file upload to WildFire
Answer: C
NEW QUESTION 24
An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.
The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)
- A. Control local firewall rules
- B. Ensure management continuity
- C. Control of post rules
- D. Improve log collection redundancy
Answer: B,D
NEW QUESTION 25
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?
- A. M-200
- B. M-100
- C. M-600
- D. Panorama VM-Series
Answer: D
NEW QUESTION 26
What are two advantages of the DNS Sinkholing feature? (Choose two.)
- A. It forges DNS replies to known malicious domains.
- B. It monitors DNS requests passively for malware domains.
- C. It can be deployed independently of an Anti-Spyware Profile.
- D. It can work upstream from the internal DNS server.
Answer: A,D
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing
NEW QUESTION 27
Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server? (Choose three.)
- A. Enterprise Administrators
- B. Server Operator
- C. Domain Administrators
- D. Distributed COM Users
- E. Event Log Readers
Answer: B,C,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/user-id-agent-setup/user-id-agent-setup-wmi-authentication
NEW QUESTION 28
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)
- A. RADIUS
- B. Active Directory monitoring
- C. Client Probing
- D. TACACS
- E. Lotus Domino
- F. SNMP server
- G. eDirectory monitoring
Answer: A,C,D
NEW QUESTION 29
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
- A. expose the visibility and presence of command-and-control sessions
- B. measure the adoption of URL filters. App-ID. User-ID
- C. use of decryption policies
- D. use of device management access and settings
- E. identify sanctioned and unsanctioned SaaS applications
Answer: B,C,E
NEW QUESTION 30
Which profile or policy should be applied to protect against port scans from the internet?
- A. Interface management profile on the zone of the ingress interface
- B. Security profiles to security policy rules for traffic sourcing from the untrust zone
- C. Zone protection profile on the zone of the ingress interface
- D. An App-ID security policy rule to block traffic sourcing from the untrust zone
Answer: C
NEW QUESTION 31
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?
- A. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)
- B. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)
- C. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)
- D. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)
Answer: C
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic-content-updates.html
NEW QUESTION 32
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?
- A. Once an hour
- B. Once every minute
- C. Once a day
- D. Once a week
Answer: D
NEW QUESTION 33
Which security profile on the NGFW includes signatures to protect you from brute force attacks?
- A. Vulnerability Protection Profile
- B. URL Filtering Profile
- C. Zone Protection Profile
- D. Anti-Spyware Profile
Answer: A
NEW QUESTION 34
What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)
- A. It can automatically create address groups for use with KVM.
- B. It can bootstrap the virtual firewalls for dynamic deployment scenarios.
- C. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.
- D. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary
Answer: B,C
NEW QUESTION 35
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
- A. use of decryption policies
- B. expose the visibility and presence of command-and-control sessions
- C. measure the adoption of URL filters. App-ID. User-ID
- D. use of device management access and settings
- E. identify sanctioned and unsanctioned SaaS applications
Answer: C,E
NEW QUESTION 36
Which two products can send logs to the Cortex Data Lake? (Choose two.)
- A. Prisma Access
- B. AutoFocus
- C. Prisma Public Cloud
- D. PA-3260 firewall
Answer: A,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
NEW QUESTION 37
Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- A. Layer 3
- B. Layer 2
- C. virtual wire
- D. transparent bridge
Answer: A,D
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-broker/decryption-broker-concepts/decryption-broker-security-chains-multiple.html
NEW QUESTION 38
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?
- A. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)
- B. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)
- C. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)
- D. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic-content-upd
NEW QUESTION 39
A company has deployed the following
* VM-300 firewalls in AWS
* endpoint protection with the Traps Management Service
* a Panorama M-200 for managing its VM-Series firewalls
* PA-5220s for its internet perimeter,
* Prisma SaaS for SaaS security.
Which two products can send logs to the Cortex Data Lake? (Choose two).
- A. Traps Management Service
- B. Prisma SaaS
- C. VM-300 firewalls
- D. Panorama M-200 appliance
Answer: C,D
NEW QUESTION 40
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Reset
- B. Quarantine
- C. Allow
- D. Redirect
- E. Drop
- F. Alert
Answer: A,C,E,F
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 41
......
Palo Alto Networks Exam Practice Test To Gain Brilliante Result: https://www.actualtestsquiz.com/PSE-Strata-test-torrent.html
Tested Material Used To PSE-Strata: https://drive.google.com/open?id=1g37jHjo_IzApwol4D31yL9nUDF2sweQp
