Latest PSE Strata Dumps Questions For Palo Alto Networks System Engineer Professional – Strata Exam

1. Which two of the following does decryption broker provide on a NGFW? (Choose two.)

2. How frequently do WildFire signatures move into the antivirus database?

3. Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

4. Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

5. A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.

Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?

6. Which security profile on the NGFW includes signatures to protect you from brute force attacks?

7. Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

8. What action would address the sub-optimal traffic path shown in the figure?

Key:

RN - Remote Network

SC - Service Connection

MU GW - Mobile User Gateway

9. XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer’s requirements? (Choose two.)

10. Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

11. Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)

12. When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

13. Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

14. Which three new script types can be analyzed in WildFire? (Choose three.)

15. Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

16. What are two advantages of the DNS Sinkholing feature? (Choose two.)

17. Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

18. What are three considerations when deploying User-ID? (Choose three.)

19. Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?

A)

B)

C)

D)

20. DRAG DROP

Match the functions to the appropriate processing engine within the dataplane.

21. A customer has business-critical applications that rely on the general web-browsing application .

Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

22. A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.

Which Network Processing Card should be recommended in the Bill of Materials?

23. DRAG DROP

Match the WildFire Inline Machine Learning Model to the correct description for that model.

24. What is the basis for purchasing Cortex XDR licensing?

25. When having a customer pre-sales call, which aspects of the NGFW should be covered?

26. Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)

27. An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.

The customer already has multiple M-100s set up as a log collector group .

What are two valid reasons for deploying Panorama in High Availability? (Choose two.)

28. When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered? (Choose two.)

29. Palo Alto Networks publishes updated Command-and-Control signatures .

How frequently should the related signatures schedule be set?

30. Which profile or policy should be applied to protect against port scans from the internet?