Palo Alto Networks Certified PSE-Strata Dumps Questions Valid PSE-Strata Materials [Q69-Q92]

NO.69 As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

access key ID

secret access key

administrative Password

AWS account ID

NO.70 Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

NO.71 When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?

X-Forwarded-For

HTTP method

HTTP response status code

Content type

NO.72 Which statement is true about Deviating Devices and metrics?

A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation

Deviating Device Tab is only available with a SD-WAN Subscription

An Administrator can set the metric health baseline along with a valid standard deviation

Deviating Device Tab is only available for hardware-based firewalls

NO.73 Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

Connector

Database

Recipient

Operator

Attribute

Schedule

NO.74 Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?

User ID and Device-ID

Source-D and Network.ID

Source ID and Device-ID

User-ID and Source-ID

NO.75 How many recursion levels are supported for compressed files in PAN-OS 8.0?

2

5

4

3

NO.76 Which are the three mandatory components needed to run Cortex XDR? (Choose three.)

Panorama

NGFW with PANOS 8 0.5 or later

Cortex Data Lake

Traps

Pathfinder

Directory Syn Service

NO.77 Which statement best describes the business value of Palo Alto Networks Zero Touch Provisioning (ZTP)?

It is designed to simplify and automate the onboarding of new firewalls to the Panorama management server.

When it is in place, it removes the need for an onsite firewall

When the service is purchased, Palo Alto Networks sends an engineer to physically deploy the firewall to the customer environment

It allows a firewall to be automatically connected to the local network wirelessly

NO.78 WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through. Which command returns a valid result to verify the ML is working from the command line.

show wfml cloud-status

show mlav cloud-status

show ml cloud-status

show av cloud-status

NO.79 Which two methods will help avoid Split Brain when running HA in Active/Active mode? (Choose two.)

Configure a Backup HA1 Interface

Configure a Heartbeat Backup

Create a loopback IP address and use that as a Source Interface

Place your management interface in an Aggregate Interface Group configuration

NO.80 What are three considerations when deploying User-ID. (Choose three.)

Enable WMI probing in high security networks

User-ID can support a maximum of 15 hops.

Specify included and excluded networks when configuring User-ID

Use a dedicated service account for User-ID services with the minimal permissions necessary.

Only enable User-ID on trusted zones

NO.81 What is the basis for purchasing Cortex XDR licensing?

volume of logs being processed based on Datalake purchased

number of nodes and endpoints providing logs

unlimited licenses

number of NGFWs

NO.82 Which built-in feature of PAN-OS allows the NGFW administrator to create a policy that provides autoremediation for anomalous user behavior and malicious activity while maintaining user visibility?

Dynamic user groups (DUGS)

tagging groups

remote device User-ID groups

dynamic address groups (DAGs)

NO.83 Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)

breach the perimeter

weaponize vulnerabilities

lateral movement

exfiltrate data

recon the target

deliver the malware

NO.84 A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.
How is this goal accomplished?

Create a custom spyware signature matching the known signature with the time attribute

Add a correlation object that tracks the occurrences and triggers above the desired threshold

Submit a request to Palo Alto Networks to change the behavior at the next update

Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

NO.85 What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)

improved revenue due to more efficient network traffic throughput

Increased security due to scalable cloud delivered security Services (CDSS)

Cost savings due to reduction in IT management effort and device

NO.86 Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)

The devices are pre-configured with a virtual wire pair out the first two interfaces.

The devices are licensed and ready for deployment.

The management interface has an IP address of 192.168.1.1 and allows SSH and HTTPS connections.

A default bidirectional rule is configured that allows Untrust zone traffic to go to the Trust zone.

The interfaces are pingable.

NO.87 Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?

It processes each feature in a separate single pass with additional performance impact for each enabled feature.

Its processing applies only to security features and does not include any networking features.

It processes all traffic in a single pass with no additional performance impact for each enabled feature.

It splits the traffic and processes all security features in a single pass and all network features in a separate pass

NO.88 Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

User Mapping

Proxy Authentication

Group Mapping

802.1X Authentication

NO.89 Which two interface types can be used when configuring GlobalProtect Portal?(Choose two)

Virtual Wire

Loopback

Layer 3

Tunnel

NO.90 A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at
100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

VM-200

VM-100

VM-50

VM-300

NO.91 Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer’s current security posture?

BPA

PPA

Expedition

SLR

NO.92 Which configuration creates the most comprehensive “best-practice” Anti Spyware profile to prevent command and Control traffic?

Clone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

Clone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

Edit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

Edit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

Palo Alto Networks Certified PSE-Strata Dumps Questions Valid PSE-Strata Materials [Q69-Q92]

Be the first to reply

Leave a Reply Cancel reply