Palo Alto Networks PSE-Strata Practice Verified Answers - Pass Your Exams For Sure! [2022]
Valid Way To Pass Palo Alto Networks Systems Engineer's PSE-Strata Exam
NEW QUESTION 46
Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server? (Choose three.)
- A. Distributed COM Users
- B. Event Log Readers
- C. Server Operator
- D. Enterprise Administrators
- E. Domain Administrators
Answer: B,C,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/user-id-agent-setup/user-id-agent-setup-wmi-authentication
NEW QUESTION 47
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.
Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. Virtual systems
- B. HA active/passive
- C. Policy-based forwarding
- D. HA active/active
Answer: C,D
NEW QUESTION 48
What action would address the sub-optimal traffic path shown in the figure?
Key:
RN - Remote Network
SC - Service Connection
MU GW - Mobile User Gateway
- A. Onboard a Service Connection in the Americas region
- B. Onboard a Service Connection in the APAC region
- C. Onboard a Remote Network location in the EMEA region
- D. Remove the Service Connection in the EMEA region
Answer: B
NEW QUESTION 49
Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?
- A. Generate a Tech Support File and call PANTAC
- B. Generate a Stats Dump File and upload it to the Palo Alto Networks support portal
- C. Select Device > Licenses and click Activate feature using authorization code
- D. Select Panorama > Licenses and click Activate feature using authorization code
Answer: D
NEW QUESTION 50
How do you configure the rate of file submissions to WildFire in the NGFW?
- A. maximum number of files per day
- B. based on the purchased license uploaded
- C. QoS tagging
- D. maximum number of files per minute
Answer: D
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/80/wildfire/wf_admin/submit-files-for-wildfire-analysis/firew
NEW QUESTION 51
Match the WildFire Inline Machine Learning Model to the correct description for that model.
Answer:
Explanation:
NEW QUESTION 52
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION 53
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)
- A. TACACS
- B. eDirectory monitoring
- C. Client Probing
- D. RADIUS
- E. Active Directory monitoring
- F. Lotus Domino
- G. SNMP server
Answer: A,C,D
NEW QUESTION 54
Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.
- A. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25 - B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x
PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25 - C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-LGS-1TB-1YR - D. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
Answer: B
NEW QUESTION 55
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Alert
- B. Allow
- C. Quarantine
- D. Drop
- E. Redirect
- F. Reset
Answer: A,B,D,F
NEW QUESTION 56
Which two steps are required to configure the Decryption Broker? (Choose two.)
- A. activate the Decryption Broker license
- B. enable a pair of virtual wire interfaces to forward decrypted traffic
- C. reboot the firewall to activate the license
- D. enable SSL Forward Proxy decryption
Answer: A,B
NEW QUESTION 57
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: B
NEW QUESTION 58
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. define URL Filtering Profile
- B. enable User-ID
- C. define an SSL decryption rulebase
- D. enable App-ID
- E. validate credential submission detection
Answer: A,B,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 59
Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)
- A. Identified vulnerability exploits
- B. Endpoints access files from a removable drive
- C. Suspicious host behavior
- D. Launch of an identified malware executable file
Answer: A,C
NEW QUESTION 60
Decryption port mirroring is now supported on which platform?
- A. all hardware-based and VM-Series firewalls with the exception of VMware NSX. Citrix SDX, or public cloud hypervisors
- B. only one the PA-5000 Series and higher
- C. all hardware-based and VM-Series firewalls regardless of where installed
- D. in hardware only
Answer: C
NEW QUESTION 61
A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?
- A. PA-7000-20GQXM-NPC
- B. PA-7000-40G-NPC
- C. PA-7000-20GQ-NPC
- D. PA-7000-20G-NPC
Answer: A
NEW QUESTION 62
Which three signature-based Threat Prevention features of the firewall are informed by intelligence from the Threat Intelligence Cloud? (Choose three.)
- A. Anti-Virus
- B. Vulnerability protection
- C. App-ID protection
- D. Botnet detection
- E. Anti-Spyware
Answer: B,C,E
NEW QUESTION 63
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. 7-Zip
- B. ELF
- C. RAR
- D. Zip
Answer: A,C
Explanation:
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
NEW QUESTION 64
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Alert
- B. Quarantine
- C. Allow
- D. Drop
- E. Redirect
- F. Reset
Answer: A,B,D,F
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 65
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)
- A. NGFW with PANOS 8 0.5 or later
- B. Cortex Data Lake
- C. Panorama
- D. Directory Syn Service
- E. Pathfinder
- F. Traps
Answer: A,B,D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-overview/cortex-xdr-prevent-architecture
NEW QUESTION 66
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?
- A. Once a day
- B. Once an hour
- C. Once a week
- D. Once every minute
Answer: C
NEW QUESTION 67
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Alert
- B. Allow
- C. Quarantine
- D. Drop
- E. Redirect
- F. Reset
Answer: A,B,D,F
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 68
A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.
Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?
- A. The Automated Correlation Engine
- B. Cortex XDR and Cortex Data Lake
- C. 3rd Party SIEM which can ingest NGFW logs and perform event correlation
- D. WildFire with API calls for automation
Answer: A
NEW QUESTION 69
......
Palo Alto Networks PSE-Strata Pre-Exam Practice Tests | DumpsActual: https://exampdf.dumpsactual.com/PSE-Strata-actualtests-dumps.html
