PSE-Strata-Pro-24 Paloalto-Networks Exam Questions and Free Practice Test

Question 13

Which two actions can a systems engineer take to discover how Palo Alto Networks can bring value to a customer's business when they show interest in adopting Zero Trust? (Choose two.)

A. Ask the customer about their internal business flows, such as how their users interact with applications and data across the infrastructure.

B. Explain how Palo Alto Networks can place virtual NGFWs across the customer's network to ensure assets and traffic are seen and controlled.

C. Use the Zero Trust Roadshow package to demonstrate to the customer how robust Palo Alto Networks capabilities are in meeting Zero Trust.

D. Ask the customer about their approach to Zero Trust, explaining that it is a strategy more than it is something they purchase.

Correct Answer:AD

Question 14

A company with a large Active Directory (AD) of over 20,000 groups has user roles based on group membership in the directory. Up to 1,000 groups may be used in Security policies. The company has limited operations personnel and wants to reduce the administrative overhead of managing the synchronization of the groups with their firewalls.
What is the recommended architecture to synchronize the company's AD with Palo Alto Networks firewalls?

A. Configure a group mapping profile with custom filters for LDAP attributes that are mapped to the user roles.

B. Configure a group mapping profile, without a filter, to synchronize all groups.

C. Configure a group mapping profile with an include group list.

D. Configure NGFWs to synchronize with the AD after deploying the Cloud Identity Engine (CIE) and agents.

Correct Answer:C

Question 15

A large global company plans to acquire 500 NGFWs to replace its legacy firewalls and has a specific requirement for centralized logging and reporting capabilities.
What should a systems engineer recommend?

A. Combine Panorama for firewall management with Palo Alto Networks' cloud-based Strata Logging Service to offer scalability for the company's logging and reportinginfrastructure.

B. Use Panorama for firewall management and to transfer logs from the 500 firewalls directly to a third-party SIEM for centralized logging and reporting.

C. Highlight the efficiency of PAN-OS, which employs AI to automatically extract critical logs and generate daily executive reports, and confirm that the purchase of 500 NGFWs is sufficient.

D. Deploy a pair of M-1000 log collectors in the customer data center, and route logs from all 500 firewalls to the log collectors for centralized logging and reporting.

Correct Answer:A

START PSE-Strata-Pro-24 EXAM