PSE-PLATFORM Exam Questions

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

Which feature prevents the submission of corporate login information into website forms?

Which three steps will reduce the CPU utilization on the management plane? (Choose three.)

Which two virtualization platforms officially support the deployment of Palo Alto Networks VM-Series firewalls? (Choose two.)

To connect the Palo Alto Networks firewall to AutoFocus, which setting must be enabled?

Which event will happen if an administrator uses an Application Override Policy?

An administrator wants multiple web servers in the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the...

Which three options are supported in HA Lite? (Choose three.)

An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS?software, the administrator enables log forwarding from t...

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair. Which NGFW receives the configuration from Panora...

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)

Which three firewall states are valid? (Choose three.)

An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

An administrator needs to implement an NGFW between their DMZ and Core network. EIGRP Routing between the two environments is required. Which interface type would support this busi...

A network security engineer for a large company has just installed a PA-5060 Firewall to isolate the company's PCI environment from its production network. The company's engineers...

After Migrating from an ASA firewall to a Palo Alto Networks Firewall, the VPN connection between a remote network and the Palo Alto Networks Firewall is not establishing correctly...

If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is...

An administrator sees several inbound sessions identified as unknown-tcp in the Traffic logs. The administrator determines that these sessions are form external users accessing the...

During the packet flow process, which two processes are performed in application identification? (Choose two.)

An administrator logs in to the Palo Alto Networks NGFW and reports that the WebUI is missing the Policies tab. Which profile is the cause of the missing Policies tab?

When configuring a GlobalProtect Portal, what is the purpose of specifying an Authentication Profile?

The certificate information displayed in the following image is for which type of certificate?

An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall. Which priority...

Which option is part of the content inspection process?

Which three types of software will receive a Grayware verdict from WildFire? (Choose Three)

A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects. How would an administrator configure the interface to 1...

In a virtual router, which object contains all potential routes?

Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, wher...

A customer has an application that is being identified as unknown-top for one of their custom PostgreSQL database connections. Which two configuration options can be used to correc...

An administrator has enabled OSPF on a virtual router on the NGFW. OSPF is not adding new routes to the virtual router. Which two options enable the administrator to troubleshoot t...

Which tool provides an administrator the ability to see trends in traffic over periods of time, such as threats detected in the last 30 days?

The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router. Which two options would help t...

How can the firewall be configured automatically disable the PBF rule if the next hop goes down?

Which feature must you configure to prevent users form accidentally submitting their corporate credentials to a phishing website?

What are two benefits of nested device groups in Panorama? (Choose two.)

PAN-OS 7.0 introduced an automated correlation engine that analyzes log patterns and generates correlation events visible in the new Application Command Center (ACC). Which license...

An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OS® software. The firewall has internet connectivity through an Ethernet interface, b...

Which three settings are defined within the Templates object of Panorama? (Choose three.)

An administrator has left a firewall to use the default port for all management services. Which three functions are performed by the dataplane? (Choose three.)

A Security policy rule is configured with a Vulnerability Protection Profile and an action of `Deny". Which action will this cause configuration on the matched traffic?

If the firewall has the link monitoring configuration, what will cause a failover?

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans. Which Security Profile type will protect against worms and t...

A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers. Which option will protect the individual servers?

Refer to the exhibit. Which will be the egress interface if the traffic's ingress interface is ethernet 1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

Which PAN-OS?policy must you configure to force a user to provide additional credentials before he is allowed to access an internal application that contains highly-sensitive busin...

How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

If an administrator does not possess a website's certificate, which SSL decryption mode will allow the Palo Alto networks NGFW to inspect when users browse to HTTP(S) websites?

Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OS?version, and serial number?

An administrator has configured the Palo Alto Networks NGFW's management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW...

A customer wants to set up a VLAN interface for a Layer 2 Ethernet port. Which two mandatory options are used to configure a VLAN interface? (Choose two.)