PSE-Strata-Pro-24 by Palo Alto Networks Actual Free Exam Questions And Answers

Question 1

There are no Advanced Threat Prevention log events in a company's SIEM instance. However, the systems administrator has confirmed that the Advanced Threat Prevention subscription is licensed and that threat events are visible in the threat logs on the firewall.
Which action should the systems administrator take next?

A. Ensure the Security policy rules that use Advanced Threat Prevention are set for log forwarding to the correct SIEM.

B. Check with the SIEM vendor to verify that Advanced Threat Prevention logs are reaching the company's SIEM instance.

C. Enable the company's Threat Prevention license.

D. Have the SIEM vendor troubleshoot its software.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

When a customer needs to understand how Palo Alto Networks NGFWs lower the risk of exploitation by newly announced vulnerabilities known to be actively attacked, which solution and functionality delivers the most value?

A. Advanced Threat Prevention's command injection and SQL injection functions use inline deep learning against zero-day threats.

B. Single Pass Architecture and parallel processing ensure traffic is efficiently scanned against any enabled Cloud-Delivered Security Services (CDSS) subscription.

C. Advanced URL Filtering uses machine learning (ML) to learn which malicious URLs are being utilized by the attackers, then block the resulting traffic.

D. WildFire loads custom OS images to ensure that the sandboxing catches any activity that would affect the customer's environment.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

The efforts of a systems engineer (SE) with an industrial mining company account have yielded interest in Palo Alto Networks as part of its effort to incorporate innovative design into operations using robots and remote-controlled vehicles in dangerous situations. A discovery call confirms that the company will receive control signals to its machines over a private mobile network using radio towers that connect to cloud-based applications that run the control programs.
Which two sets of solutions should the SE recommend?

A. That IoT Security be included for visibility into the machines and to ensure that other devices connected to the network are identified and given risk and behavior profiles.

B. That 5G Security be enabled and architected to ensure the cloud computing is not compromised in the commands it is sending to the onsite machines.

C. That Cloud NGFW be included to protect the cloud-based applications from external access into the cloud service provider hosting them.

D. That an Advanced CDSS bundle (Advanced Threat Prevention, Advanced WildFire, and Advanced URL Filtering) be procured to ensure the design receives advanced protection.

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

A. SCP log ingestion

B. XML API

C. User-ID

D. Captive portal

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

Which two tools should a systems engineer use to showcase the benefit of an evaluation that a customer has just concluded?

A. Best Practice Assessment (BPA)

B. Golden Images

C. Security Lifecycle Review (SLR)

D. Firewall Sizing Guide

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

A large global company plans to acquire 500 NGFWs to replace its legacy firewalls and has a specific requirement for centralized logging and reporting capabilities.
What should a systems engineer recommend?

A. Highlight the efficiency of PAN-OS, which employs AI to automatically extract critical logs and generate daily executive reports, and confirm that the purchase of 500 NGFWs is sufficient.

B. Deploy a pair of M-1000 log collectors in the customer data center, and route logs from all 500 firewalls to the log collectors for centralized logging and reporting.

C. Use Panorama for firewall management and to transfer logs from the 500 firewalls directly to a third- party SIEM for centralized logging and reporting.

D. Combine Panorama for firewall management with Palo Alto Networks' cloud-based Strata Logging Service to offer scalability for the company's logging and reporting infrastructure.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

A company has multiple business units, each of which manages its own user directories and identity providers (IdPs) with different domain names. The company's network security team wants to deploy a shared GlobalProtect remote access service for all business units to authenticate users to each business unit's IdP.
Which configuration will enable the network security team to authenticate GlobalProtect users to multiple SAML IdPs?

A. Multiple Cloud Identity Engine tenants for each business unit

B. Authentication sequence that has multiple authentication profiles using different authentication methods

C. Multiple authentication mode Cloud Identity Engine authentication profile for use on the GlobalProtect portals and gateways

D. GlobalProtect with multiple authentication profiles for each SAML IdP

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Palo Alto Networks Systems Engineer Professional - Hardware Firewall - PSE-Strata-Pro-24 Exam Practice Test

Contact Us

Useful Links

Latest Updated