New 2021 PSE-Strata exam questions Welcome to download the newest Prep4sureGuide PSE-Strata PDF dumps (90 Q&As)
P.S. Free 2021 Palo Alto Networks Systems Engineer PSE-Strata dumps are available on Google Drive shared by Prep4sureGuide
NEW QUESTION 51
Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer's current security posture?
- A. SLR
- B. Expedition
- C. PPA
- D. BPA
Answer: D
NEW QUESTION 52
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
Explanation:
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-tasks.html
NEW QUESTION 53
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?
- A. 18 bytes
- B. 8MB
- C. 1500 bytes
- D. depends on the Cortex Data Lake tier purchased
Answer: C
NEW QUESTION 54
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: D
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION 55
How frequently do WildFire signatures move into the antivirus database?
- A. every 1 hour
- B. every 24 hours
- C. once a week
- D. every 12 hours
Answer: B
NEW QUESTION 56
What action would address the sub-optimal traffic path shown in the figure?
Key:
RN - Remote Network
SC - Service Connection
MU GW - Mobile User Gateway
- A. Onboard a Service Connection in the Americas region
- B. Remove the Service Connection in the EMEA region
- C. Onboard a Remote Network location in the EMEA region
- D. Onboard a Service Connection in the APAC region
Answer: D
NEW QUESTION 57
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Reset
- B. Quarantine
- C. Allow
- D. Drop
- E. Alert
- F. Redirect
Answer: A,B,D,E
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 58
Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- A. virtual wire
- B. transparent bridge
- C. Layer 3
- D. Layer 2
Answer: B,C
NEW QUESTION 59
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
- A. use of decryption policies
- B. expose the visibility and presence of command-and-control sessions
- C. use of device management access and settings
- D. identify sanctioned and unsanctioned SaaS applications
- E. measure the adoption of URL filters. App-ID. User-ID
Answer: A,D,E
NEW QUESTION 60
Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- A. virtual wire
- B. transparent bridge
- C. Layer 3
- D. Layer 2
Answer: B,C
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-broker/decryption-broker-concepts/decryption-broker-security-chains-multiple.html
NEW QUESTION 61
The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security.
The firewall provides which three types of reports? (Choose three.)
- A. Botnet Reports
- B. SNMP Reports
- C. Netflow Reports
- D. User or Group Activity Reports
- E. PDF Summary Reports
Answer: A,C,D
NEW QUESTION 62
When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered?
(Choose two.)
- A. agent size and OS
- B. retention requirements
- C. the number of Traps agents
- D. Traps agent forensic data
Answer: A,D
NEW QUESTION 63
Which two of the following does decryption broker provide on a NGFW? (Choose two.)
- A. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
- B. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
- C. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
- D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times
Answer: A,C
NEW QUESTION 64
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. 7-Zip
- B. Zip
- C. ELF
- D. RAR
Answer: A,D
Explanation:
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
NEW QUESTION 65
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
- A. enable User-ID
- B. define URL Filtering Profile
- C. enable App-ID
- D. define an SSL decryption rulebase
- E. validate credential submission detection
Answer: A,B,E
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/prevent-credential-phishing.html
NEW QUESTION 66
......
PSE-Strata exam questions from Prep4sureGuide dumps: https://www.prep4sureguide.com/PSE-Strata-prep4sure-exam-guide.html (90 Q&As)
Free 2021 Palo Alto Networks Systems Engineer PSE-Strata dumps are available on Google Drive shared by Prep4sureGuide: https://drive.google.com/open?id=1nCZDqK6djZVz20je3i3vwxZbJmA1H0vs