Pass PSE-SASE Exam – Real Test Engine PDF with 67 Questions [Q17-Q41]

Rate this post

Pass PSE-SASE Exam – Real Test Engine PDF with 67 Questions

Get New PSE-SASE Certification Practice Test Questions Exam Dumps

Q17. A customer currently uses a third-party proxy solution for client endpoints and would like to migrate to Prisma Access to secure mobile user internet-bound traffic.
Which recommendation should the Systems Engineer make to this customer?

With the explicit proxy license add-on, set up GlobalProtect.

With the mobile user license, set up explicit proxy.

With the explicit proxy license, set up a service connection.

With the mobile user license, set up a corporate access node.

Q18. How does the secure access service edge (SASE) security model provide cost savings to organizations?

The single platform reduces costs compared to buying and managing multiple point products.

The compact size of the components involved reduces overhead costs, as less physical space is needed.

The content inspection integration allows third-party assessment, which reduces the cost of contract services.

The increased complexity of the model over previous products reduces IT team staffing costs.

Q19. The Cortex Data Lake sizing calculator for Prisma Access requires which three values as inputs? (Choose three.)

throughput of remote networks purchased

cloud-managed or Panorama-managed deployment

retention period for the logs to be stored

number of log-forwarding destinations

number of mobile users purchased

Q20. Which connection method allows secure web gateway (SWG) access to internet-based SaaS applications using HTTP and HTTPS protocols?

GlobalProtect

Broker VM

explicit proxy

system-wide proxy

Q21. How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?

Enable syslog on the Instant-On Network (ION) device.

Use a zone-based firewall to export directly through application program interface (API) to the SIEM.

Enable Simple Network Management Protocol (SNMP) on the Instant-On Network (ION) device.

Use the centralized flow data-export tool built into the controller.

Q22. Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?

>show sdwan connection all |

>show sdwan session distribution policy-name

>show sdwan path-monitor stats vif

>show sdwan event

Q23. Which two services are provided by Prisma Access Insights? (Choose two.)

summary overview screen of the health and performance of an organization’s entire Prisma Access environment

configuration of the on-premises firewall located behind the service-connection termination

detection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise’s data

multiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure

Q24. Which statement applies to Prisma Access licensing?

Internet of Things (IOT) Security is included with each license.

It provides cloud-based, centralized log storage and aggregation.

It is a perpetual license required to enable support for multiple virtual systems on PA-3200 Series firewalls.

For remote network and Clean Pipe deployments, a unit is defined as 1 Mbps of bandwidth.

Q25. Which element of Prisma Access enables both mobile users and users at branch networks to access resources in headquarters or a data center?

service connections

App-ID

private clouds

User-ID

Q26. Which product leverages GlobalProtect agents for endpoint visibility and native Prisma SD-WAN integration for remote sites and branches?

Cloud-Delivered Security Services (CDSS)

WildFire

CloudBlades:

Autonomous Digital Experience Management (ADEM)

Q27. What is a key benefit of CloudBlades?

automation of UI workflow without any code development and deployment of Prisma SD-WAN ION devices

utilization of near real-time analysis to detect previously unseen, targeted malware and advanced persistent threats

identification of port-based rules so they can be converted to application-based rules without compromising application availability

configuration of the authentication source once instead of for each authentication method used

Q28. Which product enables websites to be rendered in a sandbox environment in order to detect and remove malware and threats before they reach the endpoint?

remote browser isolation

secure web gateway (SWG)

network sandbox

DNS Security

Q29. What can prevent users from unknowingly downloading potentially malicious file types from the internet?

Apply a File Blocking profile to Security policy rules that allow general web access.

Apply a Zone Protection profile to the untrust zone.

Assign an Antivirus profile to Security policy rules that deny general web access.

Assign a Vulnerability profile to Security policy rules that deny general web access.

Q30. Which secure access service edge (SASE) networking component inspects web-based protocols and traffic to securely connect users to applications?

proxy

SD-WAN

secure web gateway (SWG)

cloud access security broker (CASB)

Q31. What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?

A heartbeat connection between the firewall peers ensures seamless failover in the event that a peer goes down.

It prepares the keys and certificates required for decryption, creating decryption profiles and policies, and configuring decryption port mirroring.

Protection is offered in the cloud through a unified platform for complete visibility and precise control over web access while enforcing security policies that protect users from hostile websites.

It creates tunnels that allow users and systems to connect securely over a public network as if they were connecting over a local area network (LAN).

Q32. What are two benefits provided to an organization using a secure web gateway (SWG)? (Choose two.)

VPNs remain connected, reducing user risk exposure.

Security policies for making internet access safer are enforced.

Access to inappropriate websites or content is blocked based on acceptable use policies.

An encrypted challenge-response mechanism obtains user credentials from the browser.

Q33. What happens when SaaS Security sees a new or unknown SaaS application?

It forwards the application for WildFire analysis.

It uses machine learning (ML) to classify the application.

It generates alerts regarding changes in performance.

It extends the branch perimeter to the closest node with high performance.

Q34. Which three decryption methods are available in a security processing node (SPN)? (Choose three.)

SSL Outbound Proxy

SSHv2 Proxy

SSL Forward Proxy

SSL Inbound Inspection

SSH Inbound Inspection

Q35. Which two prerequisites must an environment meet to onboard Prisma Access mobile users? (Choose two.)

Zoning must be configured to require a user ID for the mobile users trust zone.

Mapping of trust and untrust zones must be configured.

BGP must be configured so that service connection networks can be advertised to the mobile gateways.

Mobile user subnet and DNS portal name must be configured.

Q36. What are three ways the secure access service edge (SASE) model can help an organization? (Choose three.)

cost savings

data protection

increased licensing requirements

increased performance

decreased reliance on best practices

Q37. Which application gathers health telemetry about a device and its WiFi connectivity in order to help determine whether the device or the WiFi is the cause of any performance issues?

data loss prevention (DLP)

remote browser isolation (RBI)

Cortex Data Lake

GlobalProtect

Q38. A customer currently has 150 Mbps of capacity at a site. Records show that, on average, a total of 30 Mbps of bandwidth is used for the two links.
What is the appropriate Prisma SD-WAN license for this site?

50 Mbps

175 Mbps

250 Mbps

25 Mbps

Q39. Which two services are part of the Palo Alto Networks cloud-delivered security services (CDSS) package?
(Choose two.)

Internet of Things (IoT) Security

virtual desktop infrastructure (VDI)

Advanced URL Filtering (AURLF)

security information and event management (SIEM)

Q40. Which element of a secure access service edge (SASE)-enabled network provides true integration of services, not service chains, with combined services and visibility for all locations, mobile users, and the cloud?

identity and network location

broad network-edge support

converged WAN edge and network security

cloud-native, cloud-based delivery

Q41. Organizations that require remote browser isolation (RBI) to protect their users can automate connectivity to third-party RBI products with which platform?

Zero Trust

SaaS Security API

GlobalProtect

CloudBlades API