PSE-PLATFORM Exam Questions

When configuring the firewall for packet capture, what are the valid stage types?

Which operation will impact performance of the management plane?

Which User-ID method maps IP addresses to usernames for users connecting through a web proxy that has already authenticated the user?

The firewall determines if a packet is the first packet of a new session or if a packet is part of an existing session using which kind of match?

Which GlobalProtect Client connect method requires the distribution and use of machine certificates?

Which feature can provide NGFWs with User-ID mapping information?

Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)

Which option enables a Palo Alto Networks NGFW administrator to schedule Application and Threat updates while applying only new content IDs to traffic?

Which is the maximum number of samples that can be submitted to WildFire per day, based on a WildFire subscription?

In which two types of deployment is active/active HA configuration supported? (Choose two.)

Which logs enable a firewall administrator to determine whether a session was decrypted?

An administrator needs to upgrade an NGFW to the most current version of PAN-OS® software. The following is occurring: - Firewall has internet connectivity through e 1/1. - Default...

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial-of-service attacks. How can the Palo Alto Ne...

An administrator deploys PA-500 NGFWs as an active/passive high availability pair. The devices are not participating in dynamic routing, and preemption is disabled. What must be ve...

A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-home or beacon out to external command-and-contr...

What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)

Which administrative authentication method supports authorization by an external service?

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)

An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewall use Layer 3 interfaces to send traffic to a single gateway IP for...

How does Panorama prompt VMWare NSX to quarantine an infected VM?

An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of tha...

Which two actions would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL Forward Proxy? (Choose two.)

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the...

What is the purpose of the firewall decryption broker?

What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

Which is not a valid reason for receiving a decrypt-cert-validation error?

In the following image from Panorama, why are some values shown in red?

The firewall is not downloading IP addresses from MineMeld. Based, on the image, what most likely is wrong?

Based on the image, what caused the commit warning?

Which three split tunnel methods are supported by a GlobalProtect Gateway?

Starting with PAN-OS version 9.1, application dependency information is now reported in which new locations? (Choose two.)

Which three items are import considerations during SD-WAN configuration planning? (Choose three.)

Which two events trigger the operation of automatic commit recovery? (Choose two.)

Panorama provides which two SD_WAN functions? (Choose two.)