The Realest Study Materials PSE-Strata-Associate Dumps Updated Aug 04, 2023 [Q20-Q39]

NO.20 Which section of a Security Lifecycle Review (SLR) report summarizes risk exposure by breaking down a detected attack on the network?

Advanced URL Filtering Analysis

SaaS Applications

Threats at a Glance

Applications that Introduce Risk

NO.21 Which feature allows a customer to gain visibility and respond to changes in user behavior or potential threats without manual policy changes?

User-ID agent

dynamic user groups (DUGs)

Lightweight Directory Access Protocol (LDAP) sync

dynamic address objects

NO.22 Which three key functions are processed as part of the Palo Alto Networks single-pass architecture (SPA)?
(Choose three.)
Select 3 Correct Responses

User-ID

Content-ID

Intruder-ID

Device-ID

Virus-ID

NO.23 A customer interested in Panorama is concerned about managing multiple firewalls they are putting in place globally. Each location has its own IP addresses, zones, and VPN configurations.
Which element of Panorama will assist the customer in pushing this unique configuration information to the individual firewalls?

device profile

GlobalProtect

templates

device groups

NO.24 What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

micro-segmenting network traffic based on the unique identification number of the content

increasing latency as new threat prevention features are enabled

detecting and preventing known and unknown threats in a single pass

enforcing policy control over unapproved web surfing

proactively identifying and defending against unknown, new, or custom malware and exploits

NO.25 Implementation of which PAN-OS feature improves visibility and prevention of malware?

Anti-Spyware profiles

Data Filtering profiles

Decryption profiles

Antivirus profiles

NO.26 How does Cloud Identity Engine (CIE) simplify deployment of cloudbased services to provide user authentication?

It allows configuration of an authentication source once instead of for each authentication method.

It expands the capability to filter and forward decrypted and non-decrypted Transport Layer Security (TLS) traffic.

It ensures that a compromised master key does not compromise the configuration encryption for an entire deployment.

It authenticates users via a cloud-based service and refers to the hub for mappings for group identification.

NO.27 Which deployment method is used to integrate a firewall to be inline in an existing network but does not support additional routing or switching?

virtual wire

TAP mode

Layer 3

Layer 2

NO.28 Which three of the following are features of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.) Select 3 Correct Responses

Login-ID

User-ID

App-ID

Network-ID

SSL/SSH Decrypt

NO.29 Which of the following is an advantage of the Palo Alto Networks Next-Generation Firewall (NGFW)?

Docker containers can be run on the hardware to add features.

It identifies applications by port number and protocol.

It is well positioned in the network to do more than provide access control.

Customers can create their own mix of security vendor products.

NO.30 The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?

LLDP profiles

security zones

DHCP groups

security profile groups

NO.31 What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

tech support file

Panorama plugin registration file

stats dump file

system process core file

NO.32 Which two of the following are ways that Palo Alto Networks CloudDelivered Security Services (CDSS) use confidential information collected from users? (Choose two.) Select 2 Correct Responses

legal compliance

attack retaliation attribution

verification of entitlements

verification of applicant statements

NO.33 Which architecture allows a Palo Alto Networks Next-Generation Firewall (NGFW) to achieve high performance with all security features enabled?

single-pass parallel processing

dual-pass processing

multi-core processing

parallel-pass single processing

The Realest Study Materials PSE-Strata-Associate Dumps Updated Aug 04, 2023 [Q20-Q39]

Be the first to reply

Leave a Reply Cancel reply