PSE-PLATFORM Online Practice Questions and Answers

Which three network events are highlighted through correlation objects as a potential security risks? (Choose three.)

A. Identified vulnerability exploits

B. Suspicious traffic patterns

C. Known command-and-control activity

D. Launch of an identified malware executable file

E. Endpoints access files from a removable drive

A customer is targeted by a true zero-day, targeted attack. However, the customer is protected by the Palo Alto Networks security platform. The attack leverages a previously unknown vulnerability in IE but utilizes existing hacking techniques on the endpoint. It is transported over standard HTTP traffic and conforms to the HTML standards. It then attempts to download from a website, compromised specifically for this attack, a custom piece of malware to run on the endpoints.

Which element of the platform will stop this attack?

A. App-ID

B. PAN-DB

C. Traps

D. WildFire

Which three items contain information about Command and Control (CandC) hosts? (Choose three.)

A. Threat logs

B. Data filtering logs

C. Botnet reports

D. SaaS reports

E. WildFire analysts reports

Which option is required to activate/retrieve a Device Management License on the M.100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

A. Generate a Tech Support File and call PANTAC

B. Select Device > Licenses and click activate feature using authorization code

C. Select PANORAMA > Licenses and click Activate feature using authorization code

D. Generate a State Dump File and upload it to the Palo Alto Network support portal

Given the following network diagram, an administrator is considering the use of Windows Log Forwarding and Global Catalog servers for User-ID implementation.

What are two potential bandwidth and processing bottlenecks to consider? (Choose two.)

A. Member Servers

B. Firewall

C. Domain Controllers

D. Windows Server

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer's requirements? (Choose two.)

A. Virtual systems

B. HA active/active

C. Policy-based forwarding

D. HA active/passive

Which three policies or certificates must be configured for SSL Forward Proxy decryption? (Choose three.)

A. Forward trust certificate

B. Forward untrust certificate

C. A decrypt port mirror policy

D. Internal server certificate

E. A decryption policy

How does SSL Forward Proxy decryption work?

A. SSL Forward Proxy decryption policy decrypts and inspects SSL/TLS traffic from internal users to the web.

B. The SSL Forward Proxy Firewall creates a certificate intended for the client that is intercepted and altered by the firewall.

C. If the server's certificate is signed by a CA that the firewall does not trust, the firewall will use the certificate only on Forward Trust.

D. The firewall resides between the internal client and internal server to intercept traffic between the two.

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

A. Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance

B. Palo Alto Networks AutoFocus generated Correlation Objects

C. Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles

D. WF-500 configured as private clouds for privacy concerns

E. Palo Alto Networks non-firewall products, like Traps and Aperture

A network covers three geographical areas: Americas, Europe (EMEA), and Asia (APAC). The APAC

segment of the network consists of nine HA pairs of PA-3060 firewalls, generating a combined log output K

logs per second.

Only 14 days of traffic log retention is required.

Which management and logging solution will be effective and cost-efficient for this segment of the network?

A. Two M-500s in HA management at the global level, with one M-100 with 4 TB of storage for APAC

B. Two M-500s in HA management at the global level, and one log collector-mode M-500 with 8 TB of storage for APAC

C. Two M-500s in HA management at the global level, and two log collector-mode M-500s in a log collector group with 16 TB of storage for APAC

D. Two Dual-mode M-500s in HA for both global management and storage. Each M-500 has 8 TB of storage