السؤال #1

Which two statements clarify the functionality and purchase options for Palo Alto Networks AIOps for NGFW? (Choose two.)

A. It is offered in two license tiers: a commercial edition and an enterprise edition

B. It is offered in two license tiers: a free version and a premium version

C. It uses telemetry data to forecast, preempt, or identify issues, and it uses machine learning (ML) to adjust and enhance the process

D. It forwards log data to Advanced WildFire to anticipate, prevent, or identify issues, and it uses machine learning (ML) to refine and adapt to the process

عرض الإجابة

اجابة صحيحة: BC

السؤال #2

A customer is designing a private data center to host their new web application along with a separate headquarters for users. Which cloud-delivered security service (CDSS) would be recommended for the headquarters only?

A. AThreat Prevention

B. BDNS Security

C. CWildFire

D. DAdvanced URL Filtering (AURLF)

عرض الإجابة

اجابة صحيحة: A

السؤال #3

A customer claims that Advanced WildFire miscategorized a file as malicious and wants proof, because another vendor has said that the file is benign.How could the systems engineer assure the customer that Advanced WildFire was accurate?

A. Review the threat logs for information to provide to the customer

B. Use the WildFire Analysis Report in the log to show the customer the malicious actions the file took when it was detonated

C. Open a TAG ticket for the customer and allow support engineers to determine the appropriate action

D. Do nothing because the customer will realize Advanced WildFire is right

عرض الإجابة

اجابة صحيحة: B

السؤال #4

While responding to a customer RFP, a systems engineer (SE) is presented the question, "How do PANW firewalls enable the mapping of transactions as part of Zero Trust principles?" Which two narratives can the SE use to respond to the question? (Choose two.)

A. Emphasize Zero Trust as an ideology, and that the customer decides how to align to Zero Trust principles

B. Reinforce the importance of decryption and security protections to verify traffic that is not malicious

C. Explain how the NGFW can be placed in the network so it has visibility into every traffic flow

D. Describe how Palo Alto Networks NGFW Security policies are built by using users, applications, and data objects

عرض الإجابة

اجابة صحيحة: CD

السؤال #5

A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

A. Informs WildFire and sends up a signature to the Cloud

B. Collects forensic information about the event

C. Communicates the status of the endpoint to the ESM

D. Notifies the user about the event

E. Remediates the event by deleting the malicious file

عرض الإجابة

اجابة صحيحة: BCD

السؤال #6

Which two products can send logs to the Cortex Data Lake? (Choose two.)

A. AutoFocus

B. PA - 3260 firewall

C. Prisma Access

D. Prisma Public Cloud

عرض الإجابة

اجابة صحيحة: BC

السؤال #7

A customer sees unusually high DNS traffic to an unfamiliar IP address. Which Palo Alto Networks Cloud-Delivered Security Services (CDSS) subscription should be enabled to further inspect this traffic?

A. AAdvanced Threat Prevention

B. BAdvanced WildFire

C. CAdvanced URL Filtering

D. DAdvanced DNS Security

عرض الإجابة

اجابة صحيحة: D

السؤال #8

Which configuration is required to share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

A. notify device groups within VMware Services Manager

B. a User-ID agent on a Windows domain server

C. VMware Information Sources

D. none, sharing happens by default

عرض الإجابة

اجابة صحيحة: B

السؤال #9

Which interface mode do you use to generate the statdump file that can be converted into an SLR? Assume that the SE wants to make the evaluation as unintrusive as possible.

A. Virtual Wire

B. Layer 2

C. TAP

D. Layer 3

عرض الإجابة

اجابة صحيحة: C

السؤال #10

Which is not a SaaS product?

A. Yahoo Maps

B. Microsoft Office 365

C. Microsoft Azure

D. Google Docs

عرض الإجابة

اجابة صحيحة: C

السؤال #11

Which three deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three )

A. Partner Service

B. Boot Strap

C. Prism Central

D. Tier-1 insertion

E. Tier-0 insertion

عرض الإجابة

اجابة صحيحة: ADE

السؤال #12

Which statement applies to the default configuration of a Palo Alto Networks NGFW?

A. Security profiles are applied to all policies by default, eliminating implicit trust of any data traversing the firewall

B. The default policy action for intrazone traffic is deny, eliminating implicit trust within a security zone

C. The default policy action allows all traffic unless explicitly denied

D. The default policy action for interzone traffic is deny, eliminating implicit trust between security zones

عرض الإجابة

اجابة صحيحة: D

السؤال #13

Which three deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three )

A. Partner Service

B. Boot Strap

C. Prism Central

D. Tier-1 insertion

E. Tier-0 insertion

عرض الإجابة

اجابة صحيحة: ADE

السؤال #14

Which type of cloud service can be protected by an inline firewall controlled by the organization rather than by the cloud provider?

A. ASaaS

B. BlaaS

C. CPaaS

D. DFaaS

عرض الإجابة

اجابة صحيحة: B

السؤال #15

What is the default session distribution policy in the PA-7000 Series?

A. Hash

B. Egress-Slot

C. Round Robin

D. Ingress-Slot

عرض الإجابة

اجابة صحيحة: D

السؤال #16

A company plans to deploy identity for improved visibility and identity-based controls for least privilege access to applications and dat

A. The company does not have an on-premises Active Directory (AD) deployment, and devices are connected and managed by using a combination of Entra ID and Jamf

B. Captive portal

C. User-ID agents configured for WMI client probing

D. GlobalProtect with an internal gateway deployment

E. Cloud Identity Engine synchronized with Entra ID

عرض الإجابة

اجابة صحيحة: CD

السؤال #17

Device-ID can be used in which three policies? (Choose three.)

A. Security

B. Decryption

C. Policy-based forwarding (PBF)

D. SD-WAN

E. Quality of Service (QoS)

عرض الإجابة

اجابة صحيحة: ACE

السؤال #18

Which configuration is required to share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

A. notify device groups within VMware Services Manager

B. a User-ID agent on a Windows domain server

C. VMware Information Sources

D. none, sharing happens by default

عرض الإجابة

اجابة صحيحة: B

السؤال #19

A WildFire subscription is required for which two of the following activities? (Choose two)

A. AFilter uniform resource locator (URL) sites by category

B. BForward advanced file types from the firewall for analysis

C. CUse the WildFire Application Programming Interface (API) to submit website links for analysis

D. DEnforce policy based on Host Information Profile (HIP)

E. EDecrypt Secure Sockets Layer (SSL)

عرض الإجابة

اجابة صحيحة: BC

السؤال #20

Which interface mode do you use to generate the statdump file that can be converted into an SLR? Assume that the SE wants to make the evaluation as unintrusive as possible.

A. Virtual Wire

B. Layer 2

C. TAP

D. Layer 3

عرض الإجابة

اجابة صحيحة: C

السؤال #21

A large global company plans to acquire 500 NGFWs to replace its legacy firewalls and has a specific requirement for centralized logging and reporting capabilities.What should a systems engineer recommend?

A. se Panorama for firewall management and to transfer logs from the 500 firewalls directly to a third- party SIEM for centralized logging and reporting

B. eploy a pair of M-1000 log collectors in the customer data center, and route logs from all 500 firewalls to the log collectors for centralized logging and reporting

C. ighlight the efficiency of PAN-OS, which employs AI to automatically extract critical logs and generate daily executive reports, and confirm that the purchase of 500 NGFWs is sufficient

D. ombine Panorama for firewall management with Palo Alto Networks' cloud-based Strata Logging Service to offer scalability for the company's logging and reporting infrastructure

عرض الإجابة

اجابة صحيحة: D

السؤال #22

Which three known variables can assist with sizing an NGFW appliance? (Choose three.)

A. Connections per second

B. Max sessions

C. Packet replication

D. App-ID firewall throughput

E. Telemetry enabled

عرض الإجابة

اجابة صحيحة: ABD

السؤال #23

Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics? A) B) C) D)

A. AOption

B. BOption

C. COption

D. DOption

عرض الإجابة

اجابة صحيحة: A

السؤال #24

In an overlay network model of an ACI architecture, which statement is correct?

A. AThe Top of Rack (TOR) switch must be able to understand both the overlay and the underlay network

B. BAll forwarding lookups are done at the network controller

C. CThe network controller is responsible for setting up the overlay paths

D. DThe underlay network must be Layer 3 only

عرض الإجابة

اجابة صحيحة: A

السؤال #25

Which configuration is required to share NSX security groups as tags to be used by Dynamic Address Groups in a non-NSX firewall?

A. notify device groups within VMware Services Manager

B. a User-ID agent on a Windows domain server

C. VMware Information Sources

D. none, sharing happens by default

عرض الإجابة

اجابة صحيحة: B

السؤال #26

While a quote is being finalized for a customer that is purchasing multiple PA-5400 series firewalls, the customer specifies the need for protection against zero-day malware attacks.Which Cloud-Delivered Security Services (CDSS) subscription add-on license should be included in the quote?

A. AI Access Security

B. Advanced Threat Prevention

C. Advanced WildFire

D. App-ID

عرض الإجابة

اجابة صحيحة: C

السؤال #27

A systems engineer (SE) is working with a customer that is fully cloud - deployed for all applications. The customer is interested in Palo Alto Networks NGFWs but describes the following challenges "Our apps are in AWS and Azure, with whom we have contracts and minimum - revenue guarantees. We would use the built - in firewall on the cloud service providers (CSPs), but the need for centralized policy management to reduce human error is more important." Which recommendations should the SE make?

A. Cloud NGFWs at both CSPs; provide the customer a license for a Panorama virtual appliance from their CSP's marketplace of choice to centrally manage the systems

B. Cloud NGFWs in AWS and VM - Series firewall in Azure; the customer selects a PAYG licensing Panorama deployment in their CSP of choice

C. VM - Series firewalls in both CSPs; manually built Panorama in the CSP of choice on a host of either type Palo Alto Networks provides a license

D. VM - Series firewall and CN - Series firewall in both CSPs; provide the customer a private - offer Panorama virtual appliance from their CSP’s marketplace of choice to centrally manage the systems

عرض الإجابة

اجابة صحيحة: A

السؤال #28

Which statement applies to the default configuration of a Palo Alto Networks NGFW?

A. Security profiles are applied to all policies by default, eliminating implicit trust of any data traversing the firewall

B. The default policy action for intrazone traffic is deny, eliminating implicit trust within a security zone

C. The default policy action allows all traffic unless explicitly denied

D. The default policy action for interzone traffic is deny, eliminating implicit trust between security zones

عرض الإجابة

اجابة صحيحة: D

السؤال #29

Which three deployment modes of VM-Series firewalls are supported across NSX-T? (Choose three )

A. Partner Service

B. Boot Strap

C. Prism Central

D. Tier-1 insertion

E. Tier-0 insertion

عرض الإجابة

اجابة صحيحة: ADE

السؤال #30

Which is not a SaaS product?

A. Yahoo Maps

B. Microsoft Office 365

C. Microsoft Azure

D. Google Docs

عرض الإجابة

اجابة صحيحة: C

السؤال #31

How do you configure the rate of file submissions to WildFire in the NGFW?

A. oS tagging

B. ased on the purchased license uploaded

C. aximum number of files per day

D. aximum number of files per minute

عرض الإجابة

اجابة صحيحة: C

السؤال #32

How do Palo Alto Networks NGFWs integrate with an ACI architecture?

A. SDN code hooks can help to detonate malicious file samples designed to detect virtual environments

B. Traffic can be automatically redirected using static Address objects

C. VXLAN or NVGRE traffic is terminated and inspected for translation to VLANs

D. Controllers can program firewalls using a REST-based API

عرض الإجابة

اجابة صحيحة: B

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

View The Updated PSE-Strata Exam Questions

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

View The Updated PSE-Strata Exam Questions

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان