PSE-PLATFORM Exam Questions

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

VPN traffic intended for an administrator's Palo Alto Networks NGFW is being maliciously intercepted and retransmitted by the interceptor. When creating a VPN tunnel, which protect...

Which item enables a firewall administrator to see details about traffic that is currently active through the NGFW?

An administrator needs to optimize traffic to prefer business-critical applications over non- critical applications. QoS natively integrates with which feature to provide service q...

An administrator creates an SSL decryption rule decrypting traffic on all ports. The administrator also creates a Security policy rule allowing only the applications DNS, SSL, and...

Refer to the exhibit. Which certificates can be used as a Forwarded Trust certificate?

Which method does an administrator use to integrate all non-native MFA platforms in PAN- OS?software?

Which three authentication services can administrator use to authenticate admins into the Palo Alto Networks NGFW without defining a corresponding admin account on the local firewa...

Which method will dynamically register tags on the Palo Alto Networks NGFW?

Which feature can be configured on VM-Series firewalls?

Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

What is exchanged through the HA2 link?

View the GlobalProtect configuration screen capture. What is the purpose of this configuration?

An administrator has been asked to create 100 virtual firewalls in a local, on-premise lab environment (not in "the cloud"). Bootstrapping is the most expedient way to perform this...

Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a "No Decrypt" action? (Choose two.)

Which CLI command enables an administrator to check the CPU utilization of the dataplane?

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an intern...

Which three are valid configuration options in a WildFire Analysis Profile? (Choose three.)

Which DoS protection mechanism detects and prevents session exhaustion attacks?

Which processing order will be enabled when a Panorama administrator selects the setting "Objects defined in ancestors will take higher precedence?"

An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance. Which interface type and l...

An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors. H...

The firewall identifies a popular application as an unknown-tcp. Which two options are available to identify the application? (Choose two.)

An administrator has created an SSL Decryption policy rule that decrypts SSL sessions on any port. Which log entry can the administrator use to verify that sessions are being decry...

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)

When is the content inspection performed in the packet flow process?

Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

In High Availability, which information is transferred via the HA data link?

Which three authentication factors does PAN-OS@software support for MFA? (Choose three.)

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can t...

A customer wants to combine multiple Ethernet interfaces into a single virtual interface using link aggregation. Which two formats are correct for naming aggregate interfaces? (Cho...

A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443. A Security policies rules allowing access from the Trust zone to...

Which three user authentication services can be modified to provide the Palo Alto Networks NGFW with both usernames and role names? (Choose three.)

Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

Which virtual router feature determines if a specific destination IP address is reachable?

Which Zone Pair and Rule Type will allow a successful connection for a user on the Internet zone to a web server hosted on the DMZ zone? The web server is reachable using a Destina...

An administrator has configured a QoS policy rule and a QoS Profile that limits the maximum allowable bandwidth for the YouTube application. However, YouTube is consuming more than...

Which log file can be used to identify SSL decryption failures?

A customer wants to set up a site-to-site VPN using tunnel interfaces? Which two formats are correct for naming tunnel interfaces? (Choose two.)

Based on the following image, what is the correct path of root, intermediate, and end-user certificate?

An administrator wants a new Palo Alto Networks NGFW to obtain automatic application updates daily, so it is configured to use a scheduler for the application database. Unfortunate...

Which data flow describes redistribution of user mappings?

Where can an administrator see both the management plane and data plane CPU utilization in the WebUI?

Which four NGFW multi-factor authentication factors are supported by PAN-OS? (Choose four.)

Which two features does PAN-OS® software use to identify applications? (Choose two.)

An administrator wants to upgrade an NGFW from PAN-OS® 7.1.2 to PAN-OS® 8.0.2. The firewall is not a part of an HA pair. What needs to be updated first?

Which two settings can be configured only locally on the firewall and not pushed from a Panorama template stack? (Choose two.)

An administrator just submitted a newly found piece of spyware for WildFire analysis. The spyware monitors behavior without the user's knowledge. What is the expected verdict from...