Verified PSE-Strata exam dumps Q&As with Correct 90 Questions and Answers
Palo Alto Networks PSE-Strata Test Engine PDF - All Free Dumps from PassLeaderVCE
NEW QUESTION 45
Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)
- A. Proxy Authentication
- B. Group Mapping
- C. User Mapping
- D. 802.1X Authentication
Answer: B,C
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id
NEW QUESTION 46
WildFire subscription supports analysis of which three types? (Choose three.)
- A. RPM
- B. 7-Zip
- C. Flash
- D. ISO
- E. GIF
- F. DMG
Answer: B,C,D
NEW QUESTION 47
Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)
- A. Device Tab
- B. Policies Tab
- C. Objects Tab
- D. Network Tab
Answer: A,D
NEW QUESTION 48
Which two of the following does decryption broker provide on a NGFW? (Choose two.)
- A. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
- B. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
- C. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
- D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times
Answer: B,C
NEW QUESTION 49
Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.
- A. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x
PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25 - B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25 - C. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
- D. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-LGS-1TB-1YR
Answer: A
NEW QUESTION 50
How frequently do WildFire signatures move into the antivirus database?
- A. once a week
- B. every 1 hour
- C. every 24 hours
- D. every 12 hours
Answer: C
NEW QUESTION 51
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. validate credential submission detection
- B. enable App-ID
- C. define an SSL decryption rulebase
- D. define URL Filtering Profile
- E. enable User-ID
Answer: A,D,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 52
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Drop
- B. Redirect
- C. Allow
- D. Reset
- E. Quarantine
- F. Alert
Answer: A,D,E,F
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 53
Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?
- A. Inputs
- B. Class
- C. Prototype
- D. Feed Base URL
Answer: D
Explanation:
Explanation
https://live.paloaltonetworks.com/t5/minemeld-articles/connecting-pan-os-to-minemeld-using-external-dynamic-
NEW QUESTION 54
Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.
- A. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25
- B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25
- C. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
- D. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
Answer: A
NEW QUESTION 55
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION 56
What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)
- A. It can bootstrap the virtual firewalls for dynamic deployment scenarios.
- B. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.
- C. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary
- D. It can automatically create address groups for use with KVM.
Answer: A,B
NEW QUESTION 57
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?
- A. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)
- B. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)
- C. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)
- D. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic-content-upd
NEW QUESTION 58
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Allow
- B. Drop
- C. Redirect
- D. Quarantine
- E. Reset
- F. Alert
Answer: A,B,E,F
NEW QUESTION 59
In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two.)
- A. Logs per second exceed 10,000
- B. Device count is under 100
- C. Appliance needs to be moved into data center
- D. Dedicated Logger Mode is required
Answer: A,D
NEW QUESTION 60
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?
- A. An antivirus profile to security policy rules that deny general web access
- B. A vulnerability profile to security policy rules that deny general web access
- C. A zone protection profile to the untrust zone
- D. A file blocking profile to security policy rules that allow general web access
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/best-practices/8-1/internet-gateway-best-practices/best-practice-internet-gatew
NEW QUESTION 61
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION 62
What are two presales selling advantages of using Expedition? (Choose two.)
- A. map migration gaps to professional services statement of Works (SOWs)
- B. easy migration process to move to Palo Alto Networks NGFWs
- C. reduce effort to implement policies based on App-ID and User-ID
- D. streamline & migrate to Layer7 policies using Policy Optimizer
Answer: A,B
NEW QUESTION 63
......
100% Passing Guarantee - Brilliant PSE-Strata Exam Questions PDF: https://www.passleadervce.com/Palo-Alto-Networks-Systems-Engineer/reliable-PSE-Strata-exam-learning-guide.html
Get New PSE-Strata Certification – Valid Exam Dumps Questions: https://drive.google.com/open?id=1SywJkPoQPlktlcTAtWhxw2iw-U97sUD6