2021 PSE-Strata Premium Files Test pdf - Free Dumps Collection
Get ready to pass the PSE-Strata Exam right now using our Palo Alto Networks Systems Engineer Exam Package
NEW QUESTION 24
What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)
- A. assess the state of NGFW feature adoption
- B. when you're delivering a security strategy
- C. provide users visibility into the applications currently allowed on the network
- D. help streamline the deployment and migration of NGFWs
- E. when client's want to see the power of the platform
Answer: A,C,E
NEW QUESTION 25
WildFire subscription supports analysis of which three types? (Choose three.)
- A. 7-Zip
- B. Flash
- C. RPM
- D. ISO
- E. GIF
- F. DMG
Answer: A,B,D
NEW QUESTION 26
Match the functions to the appropriate processing engine within the dataplane.
Answer:
Explanation:
NEW QUESTION 27
Which two products can send logs to the Cortex Data Lake? (Choose two.)
- A. Prisma Public Cloud
- B. Prisma Access
- C. AutoFocus
- D. PA-3260 firewall
Answer: B,D
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/forward-logs-to-cortex-data-lake
NEW QUESTION 28
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?
- A. M-600
- B. M-200
- C. M-100
- D. Panorama VM-Series
Answer: D
NEW QUESTION 29
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.
Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. Virtual systems
- B. HA active/passive
- C. Policy-based forwarding
- D. HA active/active
Answer: C,D
NEW QUESTION 30
What action would address the sub-optimal traffic path shown in the figure?
Key:
RN - Remote Network
SC - Service Connection
MU GW - Mobile User Gateway
- A. Onboard a Service Connection in the Americas region
- B. Remove the Service Connection in the EMEA region
- C. Onboard a Remote Network location in the EMEA region
- D. Onboard a Service Connection in the APAC region
Answer: D
NEW QUESTION 31
What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}
- A. prevention of cyber attacks
- B. safe enablement of all applications
- C. defense against threats with static security solution
- D. threat remediation
Answer: A,D
NEW QUESTION 32
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
- A. expose the visibility and presence of command-and-control sessions
- B. use of decryption policies
- C. use of device management access and settings
- D. identify sanctioned and unsanctioned SaaS applications
- E. measure the adoption of URL filters. App-ID. User-ID
Answer: D,E
NEW QUESTION 33
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. enable User-ID
- B. define URL Filtering Profile
- C. enable App-ID
- D. define an SSL decryption rulebase
- E. validate credential submission detection
Answer: A,B,E
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 34
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
Explanation:
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-tasks.html
NEW QUESTION 35
What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)
- A. WF-500 configured as private clouds for privacy concerns
- B. Next-generation firewalls deployed with WildFire Analysis Security Profiles
- C. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
- D. Correlation Objects generated by AutoFocus
- E. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS
Answer: C,D,E
Explanation:
https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus
NEW QUESTION 36
Which two tabs in Panorama can be used to identify templates to define a common base configuration?
(Choose two.)
- A. Device Tab
- B. Network Tab
- C. Policies Tab
- D. Objects Tab
Answer: A,B
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web-interface/panora
NEW QUESTION 37
In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?
- A. HA4
- B. HA1
- C. HA3
- D. HA2
Answer: D
NEW QUESTION 38
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. enable User-ID
- B. define URL Filtering Profile
- C. enable App-ID
- D. define an SSL decryption rulebase
- E. validate credential submission detection
Answer: A,B,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 39
Which three features are used to prevent abuse of stolen credentials? (Choose three.)
- A. WildFire Profiles
- B. URL Filtering Profiles
- C. Prisma Access
- D. SSL decryption rules
- E. multi-factor authentication
Answer: A,D,E
NEW QUESTION 40
A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)
- A. Notifies the user about the event
- B. Collects forensic information about the event
- C. Informs WildFire and sends up a signature to the Cloud
- D. Remediates the event by deleting the malicious file
- E. Communicates the status of the endpoint to the ESM
Answer: A,B,E
Explanation:
https://investors.paloaltonetworks.com/node/11156/html
NEW QUESTION 41
A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?
- A. PA-7000-20GQXM-NPC
- B. PA-7000-20G-NPC
- C. PA-7000-20GQ-NPC
- D. PA-7000-40G-NPC
Answer: A
NEW QUESTION 42
What three Tabs are available in the Detailed Device Health on Panorama for hardware-based firewalls? (Choose three.)
- A. Throughput
- B. Sessions
- C. Interfaces
- D. Mounts
- E. Environments
- F. Status
- G. Errors
Answer: B,C,E
NEW QUESTION 43
......
Master 2021 Latest The Questions Palo Alto Networks Systems Engineer and Pass PSE-Strata Real Exam!: https://www.examcollectionpass.com/Palo-Alto-Networks/PSE-Strata-practice-exam-dumps.html
A fully updated 2021 PSE-Strata Exam Dumps exam guide from training expert ExamcollectionPass: https://drive.google.com/open?id=1KhSeOf7Y7iOm9gamQErHUSdBlAqWUcb1