Valid PSE-Strata-Associate Test Answers & Palo Alto Networks PSE-Strata-Associate Exam PDF [Q14-Q34]

5/5 - (1 vote)

Valid PSE-Strata-Associate Test Answers & Palo Alto Networks PSE-Strata-Associate Exam PDF

Palo Alto Networks PSE-Strata-Associate Certification Real 2024 Mock Exam

Q14. Which subscription should be activated when a predefined, known malicious IP address is updated?

WildFire

Cortex Data Lake

Threat Prevention

URL Filtering

Q15. Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

multi-pass

multiple-core threaded

single-pass

no-pass

Q16. When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

Layer 3 interface

SLR interface

virtual wire interface

TAP interface

Q17. What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

tech support file

Panorama plugin registration file

stats dump file

system process core file

Q18. How does Cloud Identity Engine (CIE) simplify deployment of cloudbased services to provide user authentication?

It allows configuration of an authentication source once instead of for each authentication method.

It expands the capability to filter and forward decrypted and non-decrypted Transport Layer Security (TLS) traffic.

It ensures that a compromised master key does not compromise the configuration encryption for an entire deployment.

It authenticates users via a cloud-based service and refers to the hub for mappings for group identification.

Q19. Which two of the following are ways that Palo Alto Networks CloudDelivered Security Services (CDSS) use confidential information collected from users? (Choose two.) Select 2 Correct Responses

legal compliance

attack retaliation attribution

verification of entitlements

verification of applicant statements

Q20. Which section of a Security Lifecycle Review (SLR) report summarizes risk exposure by breaking down a detected attack on the network?

Advanced URL Filtering Analysis

SaaS Applications

Threats at a Glance

Applications that Introduce Risk

Q21. What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

micro-segmenting network traffic based on the unique identification number of the content

increasing latency as new threat prevention features are enabled

detecting and preventing known and unknown threats in a single pass

enforcing policy control over unapproved web surfing

proactively identifying and defending against unknown, new, or custom malware and exploits

Q22. Using a comprehensive range of natively-integrated subscriptions and inline machine learning (ML), what does a Next-Generation Firewall (NGFW) use to prevent known and unknown threats in real time?

Cloud Native Security Platform (CNSP)

Cloud Security Posture Management (CSPM)

Cloud Identity Access Management (CIAM)

Cloud Delivered Security Services (CDSS)

Q23. What is a technical benefit of User-ID in relation to policy control?

It matches traffic against policy to check whether it is allowed on the network.

It allows all users to designate view-only access to itinerant personnel.

It improves safe enablement of applications traversing the network.

It encrypts all private keys and passwords in the configuration.

Q24. Which two Cloud-Delivered Security Services (CDSS) would be appropriate for an organization that wants to secure internet traffic on a perimeter firewall? (Choose two.) Select 2 Correct Responses

WildFire

Advanced URL Filtering (AURLF)

Autonomous Digital Experience Management (ADEM)

SD-WAN

Q25. Which of the following is an appropriate first step for a customer interested in moving to Zero Trust?

Ask administrators to switch on the Zero Trust options and features of their current products.

Secure the funding required to incorporate the new architecture into their existing networks.

Set priorities by identifying the most valuable and critical assets and data on their networks.

Request a statement of compliance from their IT vendors against the Zero Trust standard.

Q26. Which three of the following are features of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.) Select 3 Correct Responses

User-ID

App-ID

Network-ID

SSL/SSH Decrypt

Q27. An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.
Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses

Layer 3

TAP mode

Virtual Wire

Layer 2

Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzkCAC
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/hamodes#id15a9d29

Loading …