Sep-2023 Palo Alto Networks PSE-Strata-Associate Actual Questions and Braindumps [Q18-Q41]

4/5 - (2 votes)

Sep-2023 Palo Alto Networks PSE-Strata-Associate Actual Questions and Braindumps

PSE-Strata-Associate Dumps To Pass Palo Alto Networks Exam in 24 Hours – DumpsReview

Q18. An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.
Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses

Layer 3

TAP mode

Virtual Wire

Layer 2

Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzkCAC
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/hamodes#id15a9d29

Q19. Which Palo Alto Networks product offers a centrally managed firewall update process?

SD_WAN

Prisma SaaS

Panorama

WildFire

Q20. Which of the following is an advantage of the Palo Alto Networks Next-Generation Firewall (NGFW)?

Docker containers can be run on the hardware to add features.

It identifies applications by port number and protocol.

It is well positioned in the network to do more than provide access control.

Customers can create their own mix of security vendor products.

Q21. What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

micro-segmenting network traffic based on the unique identification number of the content

increasing latency as new threat prevention features are enabled

detecting and preventing known and unknown threats in a single pass

enforcing policy control over unapproved web surfing

proactively identifying and defending against unknown, new, or custom malware and exploits

Q22. When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

Layer 3 interface

SLR interface

virtual wire interface

TAP interface

Q23. The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and received from this website.
Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?

Forward Proxy

Web Proxy

Certificate Proxy

Inbound Proxy

Q24. A Human Resources (HR) application has the URL of https://hr.company.com:4433/.
How should the “Service” column of the Security policy be set to match and permit this application?

Define and then select a new custom Transmission Control Protocol (TCP) service with port 4433.

Edit “service-https” to use port 4433.

Set to “service-http”.

Set to “application-defaults,” which will locate and match the HR application.

Q25. Which two of the following are benefits of the Palo Alto Networks Zero Trust architecture? (Choose two.) Select 2 Correct Responses

tighter access control

increased detection of threats and infiltration

more network segments

cloud-based virtual private network (VPN)

Q26. A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.
How will the performance of the firewall be affected if the customer also enables both WildFire and User-ID?

The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.

Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.

There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.

Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.

Q27. Using a comprehensive range of natively-integrated subscriptions and inline machine learning (ML), what does a Next-Generation Firewall (NGFW) use to prevent known and unknown threats in real time?

Cloud Native Security Platform (CNSP)

Cloud Security Posture Management (CSPM)

Cloud Identity Access Management (CIAM)

Cloud Delivered Security Services (CDSS)

Q28. What is a technical benefit of User-ID in relation to policy control?

It matches traffic against policy to check whether it is allowed on the network.

It allows all users to designate view-only access to itinerant personnel.

It improves safe enablement of applications traversing the network.

It encrypts all private keys and passwords in the configuration.

Q29. In which two of the following scenarios is personal data excluded from protection under the General Data Protection Regulation (GDPR)?
Select 2 Correct Responses

The data was automated as part of an information filing system.

The data was generated in the course of a purely personal or household activity.

The data will be used for the prevention of criminal offenses.

The data is related to a person’s economic or cultural identity.

Q30. Which three of the following are features of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.) Select 3 Correct Responses

User-ID

App-ID

Network-ID

SSL/SSH Decrypt

Q31. Which feature allows a customer to gain visibility and respond to changes in user behavior or potential threats without manual policy changes?

User-ID agent

dynamic user groups (DUGs)

Lightweight Directory Access Protocol (LDAP) sync

dynamic address objects

Loading …