[Aug 01, 2023] Verified PSE-Strata dumps and 224 unique questions [Q74-Q91]

Rate this post

[Aug 01, 2023] Verified PSE-Strata dumps and 224 unique questions

PSE-Strata Dumps for Pass Guaranteed – Pass PSE-Strata Exam 2023

The PSE-Strata exam covers a wide range of topics related to Palo Alto Networks technologies, including firewall configuration, VPN configuration, security policies, user identification, and application identification. PSE-Strata exam also tests the candidate’s knowledge of various networking protocols, such as TCP/IP, DNS, and SSL, as well as their ability to troubleshoot common network issues.

QUESTION 74
Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

PE file upload to WildFire

WildFire hybrid deployment

five-minute WildFire updates

Access to the WildFire API

QUESTION 75
A client chooses to not block uncategorized websites.
Which two additions should be made to help provide some protection? (Choose two.)

A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

A security policy rule using only known URL categories with the action set to allow

QUESTION 76
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

Client Probing

TACACS

eDirectory monitoring

SNMP server

Lotus Domino

RADIUS

Active Directory monitoring

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-id- concepts/user-mapping

QUESTION 77
Which two steps are required to configure the Decryption Broker? (Choose two.)

reboot the firewall to activate the license

activate the Decryption Broker license

enable SSL Forward Proxy decryption

enable a pair of virtual wire interfaces to forward decrypted traffic

QUESTION 78
Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

WildFire on the firewall, and AutoFocus on Panorama

URL Filtering on the firewall, and MindMeld on Panorama

Threat Prevention on the firewall, and Support on Panorama

GlobalProtect on the firewall, and Threat Prevention on Panorama

QUESTION 79
What are the three benefits of the Palo Alto Networks migration tool? (Choose three.)

Conversion of existing firewall policies to Palo Alto Networks NGFW policies

Analysis of existing firewall environment

Assistance with the transition from POC to Production

Elimination of the need for consulting/professional services

The migration tool provides App-ID enhancements to improve Technical Support calls

QUESTION 80
How do Highly Suspicious artifacts in-AutoFocus help identify when an unknown, potential zero- day, targeted attack occur to allow one to adjust the security posture?

Highly Suspicious artifacts are associated with High-Risk payloads that are inflicting massive amounts of damage to end customers.

All High Risk artifacts are automatically classified as Highly Suspicious.

Highly Suspicious artifacts are High Risk artifacts that have been seen in very few samples.

Highly Suspicious artifacts have been seen infecting a broad, significant range of companies.

QUESTION 81
When having a customer pre-sales call, which aspects of the NGFW should be covered?

The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks

The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content –malware, phishing, and C2 are updated every five minutes –to ensure that you can manage access to these sites within minutes of categorization

The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor

Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/url-filtering

QUESTION 82
Which two tabs in Panorama can be used to identify templates to define a common base configuration?
(Choose two.)

Network Tab

Policies Tab

Device Tab

Objects Tab

Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web-interface/panora

QUESTION 83
Which four steps of the cyberattack lifecycle dose the Palo Alto Networks platform present?
(Choose four)

Breach the perimeter

Exfiltrate data

Weaponries vulnerabilities

Deliver the malware

Recon the target

Lateral movement

QUESTION 84
Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

WildFire on the firewall, and AutoFocus on Panorama

Threat Prevention on the firewall, and Support on Panorama

GlobalProtect on the firewall, and Threat Prevention on Panorama

URL Filtering on the firewall, and MineMeld on Panorama

QUESTION 85
Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)

Threat logs

WildFire analysis reports

Botnet reports

Data filtering logs

SaaS reports

QUESTION 86
Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

WildFire hybrid deployment

5 minute WildFire updates to threat signatures

Access to the WildFire API

PE file upload to WildFire

QUESTION 87
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

Connector

Database

Recipient

Operator

Attribute

Schedule

QUESTION 88
A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at
100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

VM-200

VM-100

VM-50

VM-300

QUESTION 89
There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?

The push operation will fail regardless of an error or not within the configuration itself

Provided there’s no error within the configuration to be pushed, the push will succeed

The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

QUESTION 90
What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

Run a Perl script to regularly check for updates and alert when one is released

Monitor update announcements and manually push updates to Crewall

Store updates on an intermediary server and point all the firewalls to it

Use dynamic updates with the most aggressive schedule required by business needs

QUESTION 91
Which three network events are highlighted through correlation objects as a potential security risks? (Choose three.)

Identified vulnerability exploits

Suspicious traffic patterns