(PDF) Palo Alto Networks Systems Engineer PSE-Strata Exam and Certification Test Engine
Use PSE-Strata Exam Dumps (2021 PDF Dumps) To Have Reliable PSE-Strata Test Engine
NEW QUESTION 43
Which two components must be configured within User-ID on a new firewall that has been implemented?
(Choose two.)
- A. User Mapping
- B. Proxy Authentication
- C. 802.1X Authentication
- D. Group Mapping
Answer: A,D
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id
NEW QUESTION 44
Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)
- A. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule
- B. a single pair of decryption forwarding interfaces
- C. a unique Decryption policy rule is required per security chain
- D. dedicated pair of decryption forwarding interfaces required per security chain
Answer: A,C
NEW QUESTION 45
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. Zip
- B. 7-Zip
- C. RAR
- D. ELF
Answer: B,C
NEW QUESTION 46
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)
- A. Traps
- B. Directory Syn Service
- C. Pathfinder
- D. Panorama
- E. Cortex Data Lake
- F. NGFW with PANOS 8 0.5 or later
Answer: B,E,F
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-overview/cortex-xdr-prevent-architecture
NEW QUESTION 47
How frequently do WildFire signatures move into the antivirus database?
- A. once a week
- B. every 24 hours
- C. every 12 hours
- D. every 1 hour
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-concepts/wildfire-sign
NEW QUESTION 48
Match the WildFire Inline Machine Learning Model to the correct description for that model.
Answer:
Explanation:
NEW QUESTION 49
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. Zip
- B. 7-Zip
- C. RAR
- D. ELF
Answer: B,C
Explanation:
Explanation
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
NEW QUESTION 50
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?
- A. Once every minute
- B. Once a day
- C. Once an hour
- D. Once a week
Answer: B
NEW QUESTION 51
There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?
- A. Provided there's no error within the configuration to be pushed, the push will succeed
- B. The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama
- C. There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls
- D. The push operation will fail regardless of an error or not within the configuration itself
Answer: D
NEW QUESTION 52
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)
- A. Identification of application is possible on any port
- B. Traffic is separated by zones
- C. Traffic control is based on IP port, and protocol
- D. Policy match is based on application
Answer: A,D
NEW QUESTION 53
Which two steps are required to configure the Decryption Broker? (Choose two.)
- A. enable a pair of virtual wire interfaces to forward decrypted traffic
- B. enable SSL Forward Proxy decryption
- C. reboot the firewall to activate the license
- D. activate the Decryption Broker license
Answer: A,D
NEW QUESTION 54
For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.)
- A. A maximum of four service connections per Datacenter are supported with this topology
- B. The customer edge device needs to support policy-based routing with symmetric return functionality
- C. Network segments in the Datacenter need to be advertised to only one Service Connection
- D. The resources in the Datacenter will only be able to reach remote network resources that share the same region
Answer: A,C
NEW QUESTION 55
In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?
- A. HA4
- B. HA1
- C. HA3
- D. HA2
Answer: D
NEW QUESTION 56
What are two advantages of the DNS Sinkholing feature? (Choose two.)
- A. It can work upstream from the internal DNS server.
- B. It can be deployed independently of an Anti-Spyware Profile.
- C. It forges DNS replies to known malicious domains.
- D. It monitors DNS requests passively for malware domains.
Answer: A,C
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing
NEW QUESTION 57
Which profile or policy should be applied to protect against port scans from the internet?
- A. An App-ID security policy rule to block traffic sourcing from the untrust zone
- B. Interface management profile on the zone of the ingress interface
- C. Zone protection profile on the zone of the ingress interface
- D. Security profiles to security policy rules for traffic sourcing from the untrust zone
Answer: C
NEW QUESTION 58
Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?
- A. Prototype
- B. Inputs
- C. Feed Base URL
- D. Class
Answer: C
Explanation:
https://live.paloaltonetworks.com/t5/minemeld-articles/connecting-pan-os-to-minemeld-using-external-dynamic-lists/ta-p/190414
NEW QUESTION 59
Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.
- A. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
- B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25 - C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-LGS-1TB-1YR - D. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x
PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25
Answer: D
NEW QUESTION 60
In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)
- A. TXT
- B. API
- C. EDL
- D. CSV
Answer: A,C
NEW QUESTION 61
......
PSE-Strata Dumps Full Questions with Free PDF Questions to Pass: https://www.testvalid.com/PSE-Strata-exam-collection.html
PSE-Strata PDF Recently Updated Questions Dumps to Improve Exam Score: https://drive.google.com/open?id=1aeu_yHiOUVQtw0IP_FshQ0IYXwwlZGXj