ActualPDF PSE-Strata Dumps Real Exam Questions Test Engine Dumps Training [Q37-Q53]

5/5 - (1 vote)

ActualPDF PSE-Strata Dumps Real Exam Questions Test Engine Dumps Training

Palo Alto Networks PSE-Strata exam dumps and online Test Engine

What are the features of the Authentication Section?

An authentication feature is a combination of hardware, software, and firmware that creates one or more unique identifiers for each device. Newer Palo Alto Networks firewalls offer several authentication features. Common Authentication Features:

SSL VPN – Uses client-server architecture with X.509 certificates for user authentication.
IPsec VPN – Uses peer-to-peer architecture with digital certificates or pre-shared keys for user authentication. You can also configure the firewall as a RADIUS client to use external servers for user authentication.
802.1X/EAP – Uses IEEE 802.1X port-based access control for user authentication through external RADIUS servers configured on the firewall.

Q37. Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

WildFire on the firewall, and AutoFocus on Panorama

URL Filtering on the firewall, and MindMeld on Panorama

Threat Prevention on the firewall, and Support on Panorama

GlobalProtect on the firewall, and Threat Prevention on Panorama

Q38. Access to a business site is blocked by URL Filtering inline machine learning (ML) and considered as a false-positive.
How should the site be made available?

Disable URL Filtering inline ML

Create a custom URL category and add it to the Security policy

Create a custom URL category and add it on exception of the inline ML profile

Change the action of real-time detection category on URL filtering profile

Q39. When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

8MB

depends on the Cortex Data Lake tier purchased

18 bytes

1500 bytes

Q40. When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

1500 to 2500 bytes

10 MB to 30 MB

1 MB to 5 MB

100 MB to 200 MB

Q41. What two types of certificates are used to configure SSL Forward Proxy? (Choose two.)

Enterprise CA-signed certificates

Self-Signed certificates

Intermediate certificates

Private key certificates

Reference:
%20certificate.&text=Certificate%20Name-,.,unique%20name%20for%20each%20firewall

Q42. In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two.)

Dedicated Logger Mode is required

Logs per second exceed 10,000

Appliance needs to be moved into data center

Device count is under 100

Q43. A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture.
What are two steps in this process? (Choose two.)

Validate user identities through authentication

Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall

Categorize data and applications by levels of sensitivity

Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls

Q44. A customer is concerned about zero-day targeted attacks against its intellectual property.
Which solution informs a customer whether an attack is specifically targeted at them?

Cortex XDR Prevent

AutoFocus

Cortex XSOAR Community edition

Panorama Correlation Report

Q45. To connect the Palo Alto Networks firewall to AutoFocus, which setting must be enabled?

Device>Setup>Services>AutoFocus

Device> Setup>Management >AutoFocus

AutoFocus is enabled by default on the Palo Alto Networks NGFW

Device>Setup>WildFire>AutoFocus

Device>Setup> Management> Logging and Reporting Settings

Q46. A customer has business-critical applications that rely on the general web-browsing application.
Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

File Blocking Profile

DoS Protection Profile

URL Filtering Profile

Vulnerability Protection Profile

Q47. Which Palo Alto Networks security component should an administrator use to and NGFW policies to remote users?

Prisma SaaS API

Threat intelligence Cloud

GlobalProtect

Cortex XDR

Q48. Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

Identified vulnerability exploits

Launch of an identified malware executable file

Endpoints access files from a removable drive

Suspicious host behavior

Q49. Which three considerations should be made prior to installing a decryption policy on the NGFW?
(Choose three.)

Include all traffic types in decryption policy

Inability to access websites

Exclude certain types of traffic in decryption policy

Deploy decryption setting all at one time

Ensure throughput is not an issue

Q50. A customer worried about unknown attacks is hesitant to enable SSL decryption due to privacy and regulatory issues. How does the platform address the customer’s concern?

It overcomes reservations about SSL decrypt by offloading to a higher-capacity firewall to help with the decrypt throughput

It shows how AutoFocus can provide visibility into targeted attacks at the industry sector

It allows a list of websites or URL categories to be defined for exclusion from decryption

It bypasses the need to decrypt SSL traffic by analyzing the file while still encrypted

Q51. Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)

validate credential submission detection

enable User-ID

define an SSL decryption rulebase

define URL Filtering Profile

Enable App-ID

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential- phishing.html

Q52. Match the WildFire Inline Machine Learning Model to the correct description for that model.

Q53. A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today’s security infrastructure.
Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?

SP3 (Single Pass Parallel Processing)

GlobalProtect

Threat Prevention

Elastic Load Balancers

https://www.paloguard.com/SP3-Architecture.asp

Loading …

Palo Alto Networks PSE-Strata: Selling Palo Alto Networks Systems Engineer Products and Solutions: https://www.actualpdf.com/PSE-Strata_exam-dumps.html

What are the features of the Authentication Section?

Leave a Reply Cancel reply