Palo Alto Networks Systems Engineer Professional - Hardware Firewall (PSE-Strata-Pro-24) Free Practice Test

Question 1

What are the first two steps a customer should perform as they begin to understand and adopt Zero Trust principles? (Choose two)

A. Implement VM-Series NGFWs in the customer's public and private clouds to protect east-west traffic.

B. Understand which users, devices, infrastructure, applications, data, and services are part of the network or have access to it.

C. Enable relevant Cloud-Delivered Security Services (CDSS) subscriptions to automatically protect the customer's environment from both internal and external threats.

D. Map the transactions between users, applications, and data, then verify and inspect those transactions.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

What is used to stop a DNS-based threat?

A. DNS tunneling

B. Buffer overflow protection

C. DNS proxy

D. DNS sinkholing

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

A security engineer has been tasked with protecting a company's on-premises web servers but is not authorized to purchase a web application firewall (WAF).
Which Palo Alto Networks solution will protect the company from SQL injection zero-day, command injection zero-day, Cross-Site Scripting (XSS) attacks, and IIS exploits?

A. Advanced WildFire and PAN-OS 10.0 (and higher)

B. Threat Prevention and PAN-OS 11.x

C. Threat Prevention, Advanced URL Filtering, and PAN-OS 10.2 (and higher)

D. Advanced Threat Prevention and PAN-OS 11.x

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

A prospective customer is concerned about stopping data exfiltration, data infiltration, and command-and- control (C2) activities over port 53.
Which subscription(s) should the systems engineer recommend?

A. Advanced Threat Prevention and Advanced URL Filtering

B. DNS Security

C. Threat Prevention

D. App-ID and Data Loss Prevention

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which use case is valid for Palo Alto Networks Next-Generation Firewalls (NGFWs)?

A. Serverless NGFW code security provides public cloud security for code-only deployments that do not leverage virtual machine (VM) instances or containerized services.

B. Code-embedded NGFWs provide enhanced internet of things (IoT) security by allowing PAN-OS code to be run on devices that do not support embedded virtual machine (VM) images.

C. PAN-OS GlobalProtect gateways allow companies to run malware and exploit prevention modules on their endpoints without installing endpoint agents.

D. IT/OT segmentation firewalls allow operational technology resources in plant networks to securely interface with IT resources in the corporate network.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

In which two locations can a Best Practice Assessment (BPA) report be generated for review by a customer?
(Choose two.)

A. AIOps

B. Customer Support Portal

C. Strata Cloud Manager (SCM)

D. PANW Partner Portal

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

The PAN-OS User-ID integrated agent is included with PAN-OS software and comes in which two forms?
(Choose two.)

A. GlobalProtect agent

B. Cloud Identity Engine (CIE)

C. Integrated agent

D. Windows-based agent

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Palo Alto Networks Systems Engineer Professional - Hardware Firewall (PSE-Strata-Pro-24) Free Practice Test