PSE-SASE Exam Questions
124 real PSE-SASE exam questions with expert-verified answers and explanations. Page 1 of 3.
- Question #1SASE Security Services (FWaaS, ZTNA, CASB, DLP)
Which product allows advanced Layer 7 inspection, access control, threat detection and prevention?
FWaaSLayer 7 inspectionthreat detectionaccess control - Question #2CloudGenix SD-WAN Deployment and Configuration
What is a key benefit of CloudBlades?
CloudBladesSD-WAN automationno-code deploymentPrisma SD-WAN - Question #3SASE Architecture and Concepts
What is an advantage of the Palo Alto Networks cloud-based security infrastructure?
cloud securitySASE benefitsscalabilityflexible licensing - Question #4SASE Security Services (FWaaS, ZTNA, CASB, DLP)
What allows enforcement of policies based on business intent, enables dynamic path selection, and provides visibility into performance and availability for applications and network...
FWaaSdynamic path selectionbusiness-intent policyapplication visibility - Question #5SASE Architecture and Concepts
What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) mode...
SASE vs ZTNASDP modelcloud-based securityidentity-based access - Question #6SASE Security Services (FWaaS, ZTNA, CASB, DLP)
Which statement describes the data loss prevention (DLP) add-on?
DLPcloud-delivered DLPunified detection policiesdata loss prevention - Question #7Zero Trust Network Access (ZTNA)
In which step of the Five-Step Methodology for implementing the Zero Trust model does inspection and logging of all traffic take place?
Zero TrustFive-Step Methodologytraffic inspectionnetwork monitoring - Question #8CloudGenix SD-WAN Deployment and Configuration
In an SD-WAN deployment, what allows customers to modify resources in an automated fashion instead of logging on to a central controller or using command-line interface (CLI) to ma...
SD-WANAPI automationnetwork managementcentral controller - Question #9SASE Operations, Monitoring, and Troubleshooting
Which App Response Time metric is the measure of network latency?
App Response TimeRTTnetwork latencyperformance metrics - Question #10CloudGenix SD-WAN Deployment and Configuration
What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices? (Choose two.)
ION devicesfail-to-wirehardware failoverSD-WAN resilience - Question #11Cloud-Delivered Security Services
How does SaaS Security Inline provide a consistent management experience?
SaaS Security InlineCASBsecurity integrationconsistent management - Question #12SASE Operations, Monitoring, and Troubleshooting
Which product draws on data collected through PAN-OS device telemetry to provide an overview of the health of an organization's next-generation firewall (NGFW) deployment and ident...
Device InsightsPAN-OS telemetryNGFW healthsecurity analytics - Question #13Zero Trust Network Access (ZTNA)
Which component of the secure access service edge (SASE) solution provides complete session protection, regardless of whether a user is on or off the corporate network?
Zero Trustsession protectionSASE componentsuser security - Question #14Zero Trust Network Access (ZTNA)
In which step of the Five-Step Methodology of Zero Trust are application access and user access defined?
Zero TrustFive-Step MethodologyZero Trust policyaccess control - Question #15Prisma Access Deployment and Configuration
In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access 1.8?
Prisma Accessaggregate modelbandwidth allocationinterface tags - Question #16Prisma Access Deployment and Configuration
Which three decryption methods are available in a security processing node (SPN)? (Choose three.)
SPNSSL decryptionSSH proxydecryption methods - Question #17SASE Operations, Monitoring, and Troubleshooting
Which App Response Time metric measures the amount of time it takes to transfer incoming data from an external server to a local client?
App Response TimeNTTndata transfer timeperformance metrics - Question #18Prisma Access Deployment and Configuration
Which two prerequisites must an environment meet to onboard Prisma Access mobile users? (Choose two.)
Prisma Accessmobile usersonboarding prerequisitesuser ID configuration - Question #19Cloud-Delivered Security Services
How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a- service (SaaS) application usage on a network?
SaaS Security InlineCASBunsanctioned SaaSEDL threat prevention - Question #20SASE Architecture and Concepts
Which two point products are consolidated into the Prisma secure access service edge (SASE) platform? (Choose two.)
Prisma SASEADEMFWaaSplatform consolidation - Question #21Prisma Access Deployment and Configuration
Which element of Prisma Access enables both mobile users and users at branch networks to access resources in headquarters or a data center?
service connectionsmobile usersbranch connectivityPrisma Access - Question #22SASE Security Services (FWaaS, ZTNA, CASB, DLP)
Organizations that require remote browser isolation (RBI) to protect their users can automate connectivity to third-party RBI products with which platform?
remote browser isolationthird-party integrationCloudBlades APIZero Trust - Question #23SASE Architecture and Concepts
What is an advantage of the unified approach of the Palo Alto Networks secure access service edge (SASE) platform over the use of multiple point products?
unified SASE platformpoint productsnetwork complexityorganizational agility - Question #24SASE Operations, Monitoring, and Troubleshooting
How does Autonomous Digital Experience Management (ADEM) improve user experience?
ADEMdigital experience managementuser experienceremote workers - Question #25Cloud-Delivered Security Services
Which product enables organizations to open unknown files in a sandbox environment and scan them for malware or other threats?
network sandboxmalware detectionfile scanningunknown files - Question #26SASE Security Services (FWaaS, ZTNA, CASB, DLP)
What are two benefits provided to an organization using a secure web gateway (SWG)? (Choose two.)
secure web gatewayinternet access policyacceptable usecontent filtering - Question #27SASE Operations, Monitoring, and Troubleshooting
What is feature of Autonomous Digital Experience Management (ADEM)?
ADEMsingle-pane visibilityendpoint telemetryreal-time monitoring - Question #28Prisma Access Deployment and Configuration
A customer currently uses a third-party proxy solution for client endpoints and would like to migrate to Prisma Access to secure mobile user internet-bound traffic. Which recommend...
explicit proxymobile usersPrisma Accessproxy migration - Question #29SASE Security Services (FWaaS, ZTNA, CASB, DLP)
What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?
SASEsecure web gatewayunified platformcloud-delivered security - Question #30Cloud-Delivered Security Services
Which action protects against port scans from the internet?
zone protection profileport scan preventioningress zoneinternet-sourced traffic - Question #31SASE Operations, Monitoring, and Troubleshooting
Which product continuously monitors each segment from the endpoint to the application and identifies baseline metrics for each application?
ADEMendpoint-to-application monitoringbaseline metricsapplication performance - Question #32SASE Operations, Monitoring, and Troubleshooting
Which application gathers health telemetry about a device and its WiFi connectivity in order to help determine whether the device or the WiFi is the cause of any performance issues...
device health telemetryWiFi connectivityCortex Data LakeADEM - Question #33Competitive Differentiation and Positioning
What is a differentiator between the Palo Alto Networks secure access service edge (SASE) solution and competitor solutions?
path analysiscompetitive differentiationPalo Alto Networks SASEcompetitor comparison - Question #34SASE Architecture and Concepts
Which secure access service edge (SASE) networking component inspects web-based protocols and traffic to securely connect users to applications?
secure web gatewayweb traffic inspectionHTTP/HTTPSSASE components - Question #35SASE Operations, Monitoring, and Troubleshooting
What is a benefit of the Palo Alto Networks secure access service edge (SASE) solution's ability to provide insight into SD-WAN and network security metrics while highlighting crit...
MSPmulti-tenant managementSD-WAN metricsSLA troubleshooting - Question #36CloudGenix SD-WAN Deployment and Configuration
How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?
flow logsSIEM integrationION devicesyslog export - Question #37Cloud-Delivered Security Services
Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded...
SSL Inbound Proxydecryptiondata center trafficfile upload scanning - Question #38CloudGenix SD-WAN Deployment and Configuration
Which two actions take place after Prisma SD-WAN Instant-On Network (ION) devices have been deployed at a site? (Choose two.)
Prisma SD-WANION device deploymentVPN establishmentabstraction layer - Question #39Cloud-Delivered Security Services
Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)
App-IDcloud-delivered App-IDapplication identificationunknown-tcp - Question #40Prisma Access Deployment and Configuration
Which connection method allows secure web gateway (SWG) access to internet-based SaaS applications using HTTP and HTTPS protocols?
secure web gatewayGlobalProtectSaaS accessHTTP/HTTPS connectivity - Question #41SASE Architecture and Concepts
Which element of a secure access service edge (SASE)-enabled network uses many points of presence to reduce latency with support of in-country or in-region resources and regulatory...
SASE PoPscloud-native deliverylatency reductionin-region compliance - Question #42CloudGenix SD-WAN Deployment and Configuration
Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?
SD-WAN CLISD-WAN eventspath selectionpath quality - Question #43Prisma Access Deployment and Configuration
Which statement applies to Prisma Access licensing?
Prisma Access licensingbandwidth unitsremote networksClean Pipe - Question #44SASE Architecture and Concepts
What are three ways the secure access service edge (SASE) model can help an organization? (Choose three.)
SASE benefitscost savingsdata protectionperformance - Question #45Competitive Differentiation and Positioning
Which two key benefits have been identified for a customer investing in the Palo Alto Networks Prisma secure access service edge (SASE) solution? (Choose two.)
Prisma SASE benefitssecurity incidentsdata breach reductionROI - Question #46SD-WAN and Network Connectivity
What is an advantage of next-generation SD-WAN over legacy SD-WAN solutions?
next-gen SD-WANapplication-centric policiestraffic steeringlegacy SD-WAN - Question #47SASE Operations, Monitoring, and Troubleshooting
Which elements of Autonomous Digital Experience Management (ADEM) help provide end-to- end visibility of everything in an organization's environment?
ADEMendpoint monitoringsynthetic monitoringreal-time traffic - Question #48Prisma Access Deployment and Configuration
Which two statements apply to features of aggregate bandwidth allocation in Prisma Access for remote networks? (Choose two.)
bandwidth allocationcompute locationsremote networksPrisma Access - Question #49Prisma Access Deployment and Configuration
The Cortex Data Lake sizing calculator for Prisma Access requires which three values as inputs? (Choose three.)
Cortex Data Lakelog sizingmobile usersretention period - Question #50Zero Trust Network Access (ZTNA)
In which step of the Five-Step Methodology for implementing the Zero Trust model are the services most valuable to the company defined?
Zero TrustFive-Step Methodologyprotect surfaceStep 1