[Aug 26, 2023] PSE-Strata PDF Recently Updated Questions Dumps to Improve Exam Score [Q78-Q101]

NEW QUESTION 78
What is used to choose the best path on a virtual router that has two or more different routes to the same destination?

Metric

Source zone

Administrative distance

Path monitoring

NEW QUESTION 79
A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

Informs WildFire and sends up a signature to the Cloud

Collects forensic information about the event

Communicates the status of the endpoint to the ESM

Notifies the user about the event

Remediates the event by deleting the malicious file

NEW QUESTION 80
Which methods are used to check for Corporate Credential Submissions? (Choose three.)

Group Mapping

IP User Mapping

LDAP query

Domain Credential Filter

User ID Credential Check

NEW QUESTION 81
What is the key benefit of Palo Alto Networks single-pass architecture (SPA) design?

It requires only one processor to complete all the functions within the box.

It allows the addition of new functions to existing hardware without affecting performance.

It allows the addition of new devices to existing hardware without affecting performance.

It decodes each network flow multiple times, therefore reducing throughput.

NEW QUESTION 82
Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

Create an anti-spyware profile to block all spyware

Create a vulnerability protection profile to block all the vulnerabilities with severity low and higher

Create an SSL Decryption policy to decrypt 100% of the traffic

Create an antivirus profile to block all content that matches and antivirus signature

Create a WildFire profile to schedule file uploads during low network usage windows

NEW QUESTION 83
Which two steps are required to configure the Decryption Broker? (Choose two.)

reboot the firewall to activate the license

activate the Decryption Broker license

enable SSL Forward Proxy decryption

enable a pair of virtual wire interfaces to forward decrypted traffic

NEW QUESTION 84
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

Once a day

Once a week

Once every minute

Once an hour

NEW QUESTION 85
A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default.
What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports

Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis

Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports

Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default

NEW QUESTION 86
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)

ELF

7-Zip

Zip

RAR

NEW QUESTION 87
Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two)

Monitor Tab

Network Tab

Device Tab

Objects Tab

Policies Tab

NEW QUESTION 88
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

M-200

M-600

M-100

Panorama VM-Series

NEW QUESTION 89
A packet that is already associated with a current session arrives at the firewall.
What is the flow of the packet after the firewall determines that it is matched with an existing session?

it is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through a single stream-based content inspection engine before egress.

It is sent through the slow path for further inspection. If subject to content inspection, it will pass through a single stream-based content inspection engines before egress

It is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through multiple content inspection engines before egress

It is sent through the slow path for further inspection. If subject to content inspection, it will pass through multiple content inspection engines before egress

NEW QUESTION 90
An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

DNS Sinkholing

DNS Proxy

Anti-Spyware Signatures

Wildfire Analysis

NEW QUESTION 91
What is the basis for purchasing Cortex XDR licensing?

volume of logs being processed based on Datalake purchased

number of nodes and endpoints providing logs

unlimited licenses

number of NGFWs

NEW QUESTION 92
What are the two group options for database when creating a custom report? (Choose two)

Oracle

SQL

Detailed Logs

Summary Databases

NEW QUESTION 93
An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.
The customer already has multiple M-100s set up as a log collector group.
What are two valid reasons for deploying Panorama in High Availability? (Choose two.)

Control of post rules

Control local firewall rules

Ensure management continuity

Improve log collection redundancy

NEW QUESTION 94
Which two types of security chains are supported by the Decryption Broker? (Choose two.)

virtual wire

transparent bridge

Layer 3

Layer 2

NEW QUESTION 95
A specific URL keeps appearing in URL filtering log entries, it was blocked successfully, but the administrator would like to investigate further.
In which two ways would AutoFocus help this administrator? (Choose two.)

Generate a list of IP addresses for use in Dynamic Address Groups on the firewall

Identify malicious files associated with this URL

Generate a correlation object that can be used to monitor associated activities

Identify malware campaigns associated with this URL

NEW QUESTION 96
Which two features are key in preventing unknown targeted attacks? (Choose two)

nighty botnet report

App-ID with the Zero Trust model

WildFire Cloud threat analysis

Single Pass Parallel Processing (SP3)

NEW QUESTION 97
A prospective customer was the victim of a zero-day attack that compromised specific employees, who then became unwitting attack vectors. The customer does not want that to happen again.
Which two Palo Alto Networks platform components will help this customer? (Choose two.)

Traps

Correlation Objects

Wildfire

Autofocus

NEW QUESTION 98
Which three actions should be taken before deploying a firewall evaluation unit in the customer’s environment? (Choose three.)

Inform the customer that they will need to provide a SPAN port for the evaluation unit assuming a TAP mode deployment.

Request that the customs make port 3978 available to allow the evaluation unit to communicate with Panorama.

Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed.

Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.

Set expectations around which information will be presented in the Security Lifecycle Review because sensitive information may be made visible.

NEW QUESTION 99
A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports.

Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.

Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis.

Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default.

NEW QUESTION 100
How frequently do WildFire signatures move into the antivirus database?

every 24 hours

every 12 hours

once a week

every 1 hour

NEW QUESTION 101
What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

allow the request and all subsequent responses

temporarily disable the DNS Security function

block the query

discard the request and all subsequent responses

[Aug 26, 2023] PSE-Strata PDF Recently Updated Questions Dumps to Improve Exam Score [Q78-Q101]

Be the first to reply

Leave a Reply Cancel reply