Steps Necessary To Pass The PSE-Strata Exam from Training Expert ActualCollection
Valid Way To Pass Palo Alto Networks Systems Engineer's PSE-Strata Exam
NEW QUESTION 48
Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server? (Choose three.)
- A. Distributed COM Users
- B. Domain Administrators
- C. Enterprise Administrators
- D. Event Log Readers
- E. Server Operator
Answer: B,D,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/user-identification/device-user-identification-user-mapping/user-id-agent-setup/user-id-agent-setup-wmi-authentication
NEW QUESTION 49
What two types of certificates are used to configure SSL Forward Proxy? (Choose two.)
- A. Enterprise CA-signed certificates
- B. Intermediate certificates
- C. Self-Signed certificates
- D. Private key certificates
Answer: A,C
Explanation:
Reference:
%20certificate.&text=Certificate%20Name-,.,unique%20name%20for%20each%20firewall
NEW QUESTION 50
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?
- A. A vulnerability profile to security policy rules that deny general web access
- B. A zone protection profile to the untrust zone
- C. A file blocking profile to security policy rules that allow general web access
- D. An antivirus profile to security policy rules that deny general web access
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/best-practices/8-1/internet-gateway-best-practices/best-practice-internet-gatew
NEW QUESTION 51
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)
- A. Client Probing
- B. eDirectory monitoring
- C. Lotus Domino
- D. RADIUS
- E. TACACS
- F. Active Directory monitoring
- G. SNMP server
Answer: A,D,E
Explanation:
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id-concepts/user-mapping
NEW QUESTION 52
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Reset
- B. Quarantine
- C. Drop
- D. Alert
- E. Redirect
- F. Allow
Answer: A,C,D,F
NEW QUESTION 53
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls?
(Choose three.)
- A. Client Probing
- B. eDirectory monitoring
- C. Lotus Domino
- D. RADIUS
- E. TACACS
- F. Active Directory monitoring
- G. SNMP server
Answer: A,D,E
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id-concepts/user-mapping
NEW QUESTION 54
Which two tabs in Panorama can be used to identify templates to define a common base configuration?
(Choose two.)
- A. Device Tab
- B. Network Tab
- C. Policies Tab
- D. Objects Tab
Answer: A,B
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web-interface/panora
NEW QUESTION 55
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?
- A. 18 bytes
- B. 8MB
- C. 1500 bytes
- D. depends on the Cortex Data Lake tier purchased
Answer: C
Explanation:
Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVMCA0
NEW QUESTION 56
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION 57
Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server? (Choose three.)
- A. Distributed COM Users
- B. Domain Administrators
- C. Enterprise Administrators
- D. Event Log Readers
- E. Server Operator
Answer: B,D,E
NEW QUESTION 58
What is the basis for purchasing Cortex XDR licensing?
- A. volume of logs being processed based on Datalake purchased
- B. unlimited licenses
- C. number of nodes and endpoints providing logs
- D. number of NGFWs
Answer: C
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
NEW QUESTION 59
What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)
- A. It can bootstrap the virtual firewalls for dynamic deployment scenarios.
- B. It can automatically create address groups for use with KVM.
- C. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary
- D. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.
Answer: A,D
NEW QUESTION 60
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
NEW QUESTION 61
An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.
The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)
- A. Control of post rules
- B. Improve log collection redundancy
- C. Control local firewall rules
- D. Ensure management continuity
Answer: B,D
NEW QUESTION 62
When having a customer pre-sales call, which aspects of the NGFW should be covered?
- A. The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
- B. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing
- C. The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content - malware, phishing, and C2 are updated every five minutes - to ensure that you can manage access to these sites within minutes of categorization
- D. The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor
Answer: B
NEW QUESTION 63
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?
- A. secret access key
- B. access key ID
- C. administrative Password
- D. AWS account ID
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-p
NEW QUESTION 64
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?
- A. A vulnerability profile to security policy rules that deny general web access
- B. A zone protection profile to the untrust zone
- C. A file blocking profile to security policy rules that allow general web access
- D. An antivirus profile to security policy rules that deny general web access
Answer: C
NEW QUESTION 65
In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)
- A. API
- B. EDL
- C. CSV
- D. TXT
Answer: B,D
NEW QUESTION 66
Which profile or policy should be applied to protect against port scans from the internet?
- A. Zone protection profile on the zone of the ingress interface
- B. Interface management profile on the zone of the ingress interface
- C. Security profiles to security policy rules for traffic sourcing from the untrust zone
- D. An App-ID security policy rule to block traffic sourcing from the untrust zone
Answer: A
NEW QUESTION 67
Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)
- A. Deploy decryption setting all at one time
- B. Exclude certain types of traffic in decryption policy
- C. Ensure throughput is not an issue
- D. Inability to access websites
- E. Include all traffic types in decryption policy
Answer: B,D,E
NEW QUESTION 68
A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types.
The customer uses a firewall with User-ID enabled
Which feature must also be enabled to prevent these attacks?
- A. WildFire
- B. App-ID
- C. Custom App-ID rules
- D. Content Filtering
Answer: A
NEW QUESTION 69
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)
- A. Monthly
- B. Daily
- C. Weekly
- D. Bi-weekly
Answer: B
NEW QUESTION 70
An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?
- A. Create a footnote within the SLR generation tool
- B. Edit the Key-Findings text to list the other types of categories that may be of interest
- C. Produce the report and edit the PDF manually
- D. Remove unwanted categories listed under 'High Risk' and use relevant information
Answer: D
NEW QUESTION 71
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.
Which two features must be enabled to meet the customer's requirements? (Choose two.)
- A. Virtual systems
- B. HA active/passive
- C. Policy-based forwarding
- D. HA active/active
Answer: C,D
NEW QUESTION 72
......
All PSE-Strata Dumps and Palo Alto Networks System Engineer Professional - Strata Exam Training Courses: https://www.actualcollection.com/PSE-Strata-exam-questions.html
Free Test Engine For Palo Alto Networks System Engineer Professional - Strata Exam Certification Exams: https://drive.google.com/open?id=1eNf7CsB5_stxvMwj8wqOAFdRVNCmr9dx