Tested Material Used To PSE-Strata Test Engine Exam Questions in here [Jan-2022]
Penetration testers simulate PSE-Strata exam PDF
NEW QUESTION 17
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
- A. measure the adoption of URL filters. App-ID. User-ID
- B. expose the visibility and presence of command-and-control sessions
- C. identify sanctioned and unsanctioned SaaS applications
- D. use of device management access and settings
- E. use of decryption policies
Answer: A,C
NEW QUESTION 18
What are three purposes for the Eval Systems, Security Lifecycle Reviews and Prevention Posture Assessment tools? (Choose three.)
- A. when you're delivering a security strategy
- B. help streamline the deployment and migration of NGFWs
- C. when client's want to see the power of the platform
- D. assess the state of NGFW feature adoption
- E. provide users visibility into the applications currently allowed on the network
Answer: C,D,E
NEW QUESTION 19
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.
Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. Virtual systems
- B. HA active/active
- C. HA active/passive
- D. Policy-based forwarding
Answer: B,D
NEW QUESTION 20
A company has deployed the following
* VM-300 firewalls in AWS
* endpoint protection with the Traps Management Service
* a Panorama M-200 for managing its VM-Series firewalls
* PA-5220s for its internet perimeter,
* Prisma SaaS for SaaS security.
Which two products can send logs to the Cortex Data Lake? (Choose two).
- A. Prisma SaaS
- B. Panorama M-200 appliance
- C. VM-300 firewalls
- D. Traps Management Service
Answer: B,C
NEW QUESTION 21
Which two products can send logs to the Cortex Data Lake? (Choose two.)
- A. PA-3260 firewall
- B. Prisma Access
- C. AutoFocus
- D. Prisma Public Cloud
Answer: A,B
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-cortex-data-lake/forward-logs-to-cortex-data-lake
NEW QUESTION 22
Which three platform components can identify and protect against malicious email links? (Choose three.)
- A. M-200
- B. M-600
- C. WildFire hybrid cloud solution
- D. WF-500
- E. WildFire public cloud
Answer: A,D,E
NEW QUESTION 23
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. validate credential submission detection
- B. define URL Filtering Profile
- C. enable User-ID
- D. define an SSL decryption rulebase
- E. enable App-ID
Answer: A,B,C
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 24
What three Tabs are available in the Detailed Device Health on Panorama for hardware-based firewalls? (Choose three.)
- A. Interfaces
- B. Throughput
- C. Errors
- D. Status
- E. Sessions
- F. Mounts
- G. Environments
Answer: A,E,G
NEW QUESTION 25
Which task would be identified in Best Practice Assessment tool?
- A. identify the threats associated with each application
- B. identify sanctioned and unsanctioned SaaS applications
- C. identify and provide recommendations for device management access
- D. identify the visibility and presence of command-and-control sessions
Answer: B
NEW QUESTION 26
What two types of certificates are used to configure SSL Forward Proxy? (Choose two.)
- A. Intermediate certificates
- B. Self-Signed certificates
- C. Private key certificates
- D. Enterprise CA-signed certificates
Answer: B,D
Explanation:
Reference:
%20certificate.&text=Certificate%20Name-,.,unique%20name%20for%20each%20firewall
NEW QUESTION 27
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?
- A. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)
- B. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)
- C. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)
- D. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)
Answer: B
NEW QUESTION 28
A client chooses to not block uncategorized websites.
Which two additions should be made to help provide some protection? (Choose two.)
- A. A security policy rule using only known URL categories with the action set to allow
- B. A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites
- C. A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access
- D. A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads
Answer: A,C
NEW QUESTION 29
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Reset
- B. Quarantine
- C. Alert
- D. Drop
- E. Allow
- F. Redirect
Answer: A,B,C,D
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 30
What are two advantages of the DNS Sinkholing feature? (Choose two.)
- A. It can work upstream from the internal DNS server.
- B. It can be deployed independently of an Anti-Spyware Profile.
- C. It monitors DNS requests passively for malware domains.
- D. It forges DNS replies to known malicious domains.
Answer: A,D
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing
NEW QUESTION 31
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: A
NEW QUESTION 32
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?
- A. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)
- B. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)
- C. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)
- D. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic-content-upd
NEW QUESTION 33
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. validate credential submission detection
- B. define URL Filtering Profile
- C. enable User-ID
- D. define an SSL decryption rulebase
- E. enable App-ID
Answer: A,B,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 34
What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)
- A. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS
- B. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
- C. Next-generation firewalls deployed with WildFire Analysis Security Profiles
- D. WF-500 configured as private clouds for privacy concerns
- E. Correlation Objects generated by AutoFocus
Answer: A,B,E
NEW QUESTION 35
What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)
- A. Grayware
- B. Malicious
- C. Spyware
- D. Benign
- E. Phishing
Answer: A,B,D,E
NEW QUESTION 36
In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)
- A. API
- B. CSV
- C. TXT
- D. EDL
Answer: C,D
NEW QUESTION 37
......
Authentic Best resources for PSE-Strata Online Practice Exam: https://testking.testpassed.com/PSE-Strata-pass-rate.html