2022 PSE-Strata Question Bank: Free PDF Download Recently Updated Questions
PSE-Strata Certification Exam Dumps with 90 Practice Test Questions
NEW QUESTION 49
How frequently do WildFire signatures move into the antivirus database?
- A. every 1 hour
- B. every 24 hours
- C. once a week
- D. every 12 hours
Answer: B
Explanation:
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-concepts/wildfire-signatures
NEW QUESTION 50
A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types.
The customer uses a firewall with User-ID enabled
Which feature must also be enabled to prevent these attacks?
- A. Content Filtering
- B. App-ID
- C. WildFire
- D. Custom App-ID rules
Answer: C
NEW QUESTION 51
Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?
- A. WildFire hybrid deployment
- B. Access to the WildFire API
- C. 5 minute WildFire updates to threat signatures
- D. PE file upload to WildFire
Answer: C
NEW QUESTION 52
Which two of the following does decryption broker provide on a NGFW? (Choose two.)
- A. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
- B. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
- C. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
- D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times
Answer: B,C
NEW QUESTION 53
Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)
- A. FTP
- B. HTTP
- C. HTTPS
- D. RTP
Answer: B,C
NEW QUESTION 54
How do you configure the rate of file submissions to WildFire in the NGFW?
- A. maximum number of files per minute
- B. based on the purchased license uploaded
- C. QoS tagging
- D. maximum number of files per day
Answer: A
NEW QUESTION 55
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. define URL Filtering Profile
- B. enable App-ID
- C. define an SSL decryption rulebase
- D. validate credential submission detection
- E. enable User-ID
Answer: A,D,E
NEW QUESTION 56
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
NEW QUESTION 57
Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?
- A. Inputs
- B. Prototype
- C. Feed Base URL
- D. Class
Answer: C
NEW QUESTION 58
A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at
100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?
- A. VM-200
- B. VM-100
- C. VM-50
- D. VM-300
Answer: C
NEW QUESTION 59
When having a customer pre-sales call, which aspects of the NGFW should be covered?
- A. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing
- B. The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor
- C. The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content - malware, phishing, and C2 are updated every five minutes - to ensure that you can manage access to these sites within minutes of categorization
- D. The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
Answer: A
NEW QUESTION 60
What is the basis for purchasing Cortex XDR licensing?
- A. number of nodes and endpoints providing logs
- B. unlimited licenses
- C. number of NGFWs
- D. volume of logs being processed based on Datalake purchased
Answer: A
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
NEW QUESTION 61
What three Tabs are available in the Detailed Device Health on Panorama for hardware-based firewalls? (Choose three.)
- A. Interfaces
- B. Errors
- C. Throughput
- D. Status
- E. Sessions
- F. Mounts
- G. Environments
Answer: A,E,G
NEW QUESTION 62
Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)
- A. WildFire analysis reports
- B. Botnet reports
- C. SaaS reports
- D. Threat logs
- E. Data filtering logs
Answer: A,B,E
NEW QUESTION 63
Which three features are used to prevent abuse of stolen credentials? (Choose three.)
- A. multi-factor authentication
- B. SSL decryption rules
- C. Prisma Access
- D. WildFire Profiles
- E. URL Filtering Profiles
Answer: A,B,D
NEW QUESTION 64
Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.
- A. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-LGS-1TB-1YR - B. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
- C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x
PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25 - D. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25
Answer: C
NEW QUESTION 65
Decryption port mirroring is now supported on which platform?
- A. all hardware-based and VM-Series firewalls regardless of where installed
- B. only one the PA-5000 Series and higher
- C. all hardware-based and VM-Series firewalls with the exception of VMware NSX. Citrix SDX, or public cloud hypervisors
- D. in hardware only
Answer: A
NEW QUESTION 66
......
New PSE-Strata Exam Dumps with High Passing Rate: https://www.prepawaypdf.com/Palo-Alto-Networks/PSE-Strata-practice-exam-dumps.html
Palo Alto Networks PSE-Strata Actual Questions and Braindumps: https://drive.google.com/open?id=1y8zjZeVBm28K5Mnu6LKzHB85NDPtHy4y