PSE-Strata-Pro-24 Paloalto-Networks Exam Questions and Free Practice Test

Question 7

When a customer needs to understand how Palo Alto Networks NGFWs lower the risk of exploitation by newly announced vulnerabilities known to be actively attacked, which solution and functionality delivers the most value?

A. Advanced URL Filtering uses machine learning (ML) to learn which malicious URLs are being utilized by the attackers, then block the resulting traffic.

B. Advanced Threat Prevention's command injection and SQL injection functions use inline deep learning against zero-day threats.

C. Single Pass Architecture and parallel processing ensure traffic is efficiently scanned against any enabled Cloud-Delivered Security Services (CDSS) subscription.

D. WildFire loads custom OS images to ensure that the sandboxing catches any activity that would affect the customer's environment.

Correct Answer:B

Question 8

A customer claims that Advanced WildFire miscategorized a file as malicious and wants proof, because another vendor has said that the file is benign.
How could the systems engineer assure the customer that Advanced WildFire was accurate?

A. Review the threat logs for information to provide to the customer.

B. Use the WildFire Analysis Report in the log to show the customer the malicious actions the file took when it was detonated.

C. Open a TAG ticket for the customer and allow support engineers to determine the appropriate action.

D. Do nothing because the customer will realize Advanced WildFire is right.

Correct Answer:B

Question 9

What are two methods that a NGFW uses to determine if submitted credentials are valid corporate credentials? (Choose two.)

A. Group mapping

B. LDAP query

C. Domain credential filter

D. WMI client probing

Correct Answer:BC

Question 10

Which statement applies to the default configuration of a Palo Alto Networks NGFW?

A. Security profiles are applied to all policies by default, eliminating implicit trust of any data traversing the firewall.

B. The default policy action for intrazone traffic is deny, eliminating implicit trust within a security zone.

C. The default policy action allows all traffic unless explicitly denied.

D. The default policy action for interzone traffic is deny, eliminating implicit trust between security zones.

Correct Answer:D

Question 11

A company has multiple business units, each of which manages its own user directories and identity providers (IdPs) with different domain names. The company??s network security team wants to deploy a shared GlobalProtect remote access service for all business units to authenticate users to each business unit's IdP.
Which configuration will enable the network security team to authenticate GlobalProtect users to multiple SAML IdPs?

A. GlobalProtect with multiple authentication profiles for each SAML IdP

B. Multiple authentication mode Cloud Identity Engine authentication profile for use on the GlobalProtect portals and gateways

C. Authentication sequence that has multiple authentication profiles using different authentication methods

D. Multiple Cloud Identity Engine tenants for each business unit

Correct Answer:A

Question 12

While a quote is being finalized for a customer that is purchasing multiple PA-5400 series firewalls, the customer specifies the need for protection against zero-day malware attacks.
Which Cloud-Delivered Security Services (CDSS) subscription add-on license should be included in the quote?

A. AI Access Security

B. Advanced Threat Prevention

C. Advanced WildFire

D. App-ID

Correct Answer:C

START PSE-Strata-Pro-24 EXAM