PSE-STRATA Exam Questions

What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?

Which security profile on the NGFW includes signatures to protect you from brute force attacks?

The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTP decoder for URL filtering is handled by which component in the NGFW?

A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series...

Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)

What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

There are different Master Keys on Panorama and managed firewalls. What is the result if a Panorama Administrator pushes configuration to managed firewalls?

Which task would be identified in Best Practice Assessment tool?

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds. How is this goal accomplished?

Which two features are found in Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location s...

Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

You have a prospective customer that is looking for a way to provide secure temporary access to contractors for a designated period of time. They currently add contractors to exist...

Which methods are used to check for Corporate Credential Submissions? (Choose three.)

WildFire subscription supports analysis of which three types? (Choose three.)

The WildFire Inline Machine Learning is configured using which Content-ID profiles?

In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need...

What filtering criteria is used to determine what users to include as members of a dynamic user group?

Which three features are used to prevent abuse of stolen credentials? (Choose three.)

A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web...

Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)

A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the a...

Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

What are three valid sources that are supported for user IP address mapping in Palo Alto Networks NGFW? (Choose three.)

Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?

Which two actions can be taken to enforce protection from brute force attacks in the security policy? (Choose two.)

A customer is concerned about zero-day targeted attacks against its intellectual property. Which solution informs a customer whether an attack is specifically targeted at them?

Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

Which three activities can the botnet report track? (Choose three.)

A customer requires protections and verdicts for PE (portable executable) and ELF (executable and linkable format) as well as integration with products and services can also access...

Which statement is true about Deviating Devices and metrics?

Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

Which two methods will help avoid Split Brain when running HA in Active/Active mode? (Choose two.)

Which three script types can be analyzed in WildFire? (Choose three.)

What helps avoid split brain in active/passive HA pair deployment?

What are three considerations when deploying User-ID? (Choose three.)

Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

Which CLI commands allows you to view SD-WAN events such as path selection and path quality measurements?

Which three steps in the cyberattack lifecycle does Palo Alto Networks Security Operating Platform prevent? (Choose three.)

Which profile or policy should be applied to protect against port scans from the internet?

Which two products are included in the Prisma Brand? (Choose two.)

Which three platform components can identify and protect against malicious email links? (Choose three.)

When having a customer pre-sales call, which aspects of the NGFW should be covered?

What aspect of PAN-OS allows for the NGFW admin to create a policy that provides auto- remediation for anomalous user behavior and malicious activity while maintaining user visibil...

You have enabled the WildFire ML for PE files in the antivirus profile and have added the profile to the appropriate firewall rules. When you go to Palo Alto Networks WildFire test...

What action would address the sub-optimal traffic path shown in the figure? Key: RN -Remote Network SC -Service Connection MU GW -Mobile User Gateway

What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)