PSE Strata practice test

1. Question 1 · 1

   What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?

   Choose one answer.

   • There are no benefits other than slight performance upgrades
   • It allows Palo Alto Networks to add new functions to existing hardware
   • Only one processor is needed to complete all the functions within the box
   • It allows Palo Alto Networks to add new devices to existing hardware

2. Question 2 · 1

   A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds. How is this goal accomplished?

   Choose one answer.

   • Create a custom spyware signature matching the known signature with the time attribute
   • Add a correlation object that tracks the occurrences and triggers above the desired threshold
   • Submit a request to Palo Alto Networks to change the behavior at the next update
   • Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

3. Question 3 · 1

   In Panorama, which three reports or logs will help identify the inclusion of a host / source in a command-and-control (C2) incident? (Choose three.)

   Choose all answers that apply.

   • WildFire analysis reports
   • data filtering logs
   • hotnet reports
   • threat logs
   • SaaS reports

4. Question 4 · 1

   Which three of the following actions must be taken to enable Credential Phishing Prevention? (Choose three.)

   Choose all answers that apply.

   • Enable App-ID.
   • Define a uniform resource locator (URL) Filtering profile.
   • Enable User-ID.
   • Enable User Credential Detection.
   • Define a Secure Sockets Layer (SSL) decryption rule base.

5. Question 5 · 1

   Which two statements correctly describe what a Network Packet Broker does for a Palo Alto Networks NGFW? (Choose two.)

   Choose all answers that apply.

   • It provides a third-party SSL decryption option, which can increase the total number of third-party devices performing analysis and enforcement.
   • It allows SSL decryption to be offloaded to the NGFW and traffic to be decrypted only once.
   • It eliminates the need for a third-party SSL decryption option, which reduces the total number of third-party devices performing decryption.
   • It allows SSL decryption to be offloaded to the NGFW and traffic to be decrypted multiple times.

6. Question 6 · 1

   A customer with a legacy firewall architecture focused on port-and-protocol-level security has heard that NGFWs open all ports by default. Which of the following statements regarding Palo Alto Networks NGFWs is an appropriate rebuttal that explains an advantage over legacy firewalls?

   Choose one answer.

   • They do not consider port information, instead relying on App-ID signatures that do not reference ports.
   • They protect all applications on all ports while leaving all ports open by default.
   • They can control applications by application-default service ports or a configurable list of approved ports on a per-policy basis.
   • They keep ports closed by default, only opening after understanding the application request, and then opening only the application-specified ports.

7. Question 7 · 1

   Which two configuration elements can be used to prevent abuse of stolen credentials? (Choose two.)

   Choose all answers that apply.

   • multi-factor authentication (MFA)
   • URL Filtering Profiles
   • WildFire analysis
   • dynamic user groups (DUGs)

8. Question 8 · 1

   A Fortune 500 customer has expressed interest in purchasing WildFire; however, they do not want to send discovered malware outside of their network. Which version of WildFire will meet this customer’s requirements?

   Choose one answer.

   • WildFire Government Cloud
   • WildFire Public Cloud
   • WildFire Private Cloud
   • WildFire Secure Cloud

9. Question 9 · 1

   What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

   Choose one answer.

   • block the query
   • allow the request and all subsequent responses
   • temporarily disable the DNS Security function
   • discard the request and all subsequent responses

10. Question 10 · 1

    What will best enhance security of a production online system while minimizing the impact for the existing network?

    Choose one answer.

    • active/active high availability (HA)
    • Layer 2 interfaces
    • virtual systems
    • virtual wire

11. Question 11 · 1

    Which two features are found in Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

    Choose all answers that apply.

    • Policy match is based on application
    • Traffic control is based on IP, port, and protocol
    • Traffic is separated by zones
    • Identification of application is possible on any port

12. Question 12 · 1

    Which three of the following are identified in the Best Practice Assessment tool? (Choose three.)

    Choose all answers that apply.

    • use of device management access and settings
    • use of decryption policies
    • presence of command-and-control (C2) sessions
    • identification of sanctioned and unsanctioned software-as-a-service (SaaS) application
    • measurement of the adoption of URL filters, App-ID, and User-ID

13. Question 13 · 1

    WildFire can discover zero-day malware in which three types of traffic? (Choose three.)

    Choose all answers that apply.

    • TFTP
    • SMTP
    • DNS
    • FTP
    • HTTPS

14. Question 14 · 1

    A large number of next-generation firewalls (NGFWs), along with Panorama and WildFire have been positioned for a prospective customer. The customer is concerned about storing retrieving and archiving firewall logs and has indicated that logs must be retained for a minimum of 60 days. An additional requirement is ingestion of a maximum of 10,000 logs per second. What will best meet the customer’s logging requirements?

    Choose one answer.

    • NGFWs that have at least 10TB of internal storage
    • Appropriately sized NGFW based on use of the POPSICLE tool
    • Appropriate Data Lake storage determined by using the Data Lake Calculator
    • A pair of fully populated M-300 storage appliances

15. Question 15 · 1

    WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through. Which command returns a valid result to verify the ML is working from the command line?

    Choose one answer.

    • show wfml cloud-status
    • show ml cloud-status
    • show mlav cloud-status
    • show wfav cloud-status

Paid access to all 94 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.