Palo Alto Networks System Engineer Professional - Strata Exam (PSE-Strata) Free Practice Test

Question 1

What action would address the sub-optimal traffic path shown in the figure?
Key:
RN - Remote Network
SC - Service Connection
MU GW - Mobile User Gateway

A. Onboard a Service Connection in the Americas region

B. Remove the Service Connection in the EMEA region

C. Onboard a Service Connection in the APAC region

D. Onboard a Remote Network location in the EMEA region

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

A. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule

B. a single pair of decryption forwarding interfaces

C. dedicated pair of decryption forwarding interfaces required per security chain

D. a unique Decryption policy rule is required per security chain

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

A. 10MB to 30 MB

B. 1500 to 2500 bytes

C. 100MB to 200 MB

D. 1MB to 5 MB

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

A. Use dynamic updates with the most aggressive schedule required by business needs

B. Run a Perl script to regularly check for updates and alert when one is released

C. Monitor update announcements and manually push updates to Crewall

D. Store updates on an intermediary server and point all the firewalls to it

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

A. Anti-Spyware Signatures

B. DNS Sinkholing

C. DNS Proxy

D. Wildfire Analysis

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which three features are used to prevent abuse of stolen credentials? (Choose three.)

A. URL Filtering Profiles

B. WildFire Profiles

C. multi-factor authentication

D. SSL decryption rules

E. Prisma Access

Correct Answer: A,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)

A. HA active/active

B. Policy-based forwarding

C. HA active/passive

D. Virtual systems

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Palo Alto Networks System Engineer Professional - Strata (PSE-Strata) Free Practice Test