PSE-STRATA-ASSOCIATE Online Practice Questions and Answers

Which of the following statements applies to WildFire Public Cloud verdicts?

A. They are unique to the affected Next-Generation Firewall (NGFW).

B. They are shared globally with all WildFire customers.

C. They must be manually downloaded from the WildFire portal.

D. They are automatically shared with third-party firewall vendors.

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

A. Layer 3 interface

B. SLR interface

C. virtual wire interface

D. TAP interface

A customer interested in Panorama is concerned about managing multiple firewalls they are putting in place globally. Each location has its own IP addresses,zones, and VPN configurations.

Which element of Panorama will assist the customer in pushing this unique configuration information to the individual firewalls?

A. device profile

B. GlobalProtect

C. templates

D. device groups

To use App-ID effectively in Security policies, which three best practices should be followed? (Choose three.)

Select 3 Correct Responses

A. Use Expedition to migrate aport-based policy to PAN-OS.

B. Whenever possible, enable App-ID override.

C. Use phased transition to safely enable applications.

D. Use Policy Optimizer to migrate to an application-based policy.

E. After the application is specified in policy, set the 7service to "any".

Which subscription should be activated when a predefined, known malicious IP address is updated?

A. WildFire

B. Cortex Data Lake

C. Threat Prevention

D. URL Filtering

Which path will generate a stats dump file on a Palo Alto Networks Next-Generation Firewall (NGFW)?

A. Device > Support > Generate Statsdump

B. Device > Statsdump > Generate Statsdump

C. Device > SLR > Generate Statsdump

D. Device > Files > Generate Statsdump

The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known aswhat?

A. LLDP profiles

B. security zones

C. DHCP groups

D. security profile groups

A firewall enabled as a decryption broker will take which of the following actions?

A. forward clear text traffic to security chains for additional enforcement

B. monitor the state of active connections to determine which network packets to allow through

C. correlate a series of related threat events that indicate a likely compromised host on the network

D. identify potential denial-of-service (DoS) attacks and take protective action

Which Palo Alto Networks product offers a centrally managed firewall update process?

A. SD_WAN

B. Prisma SaaS

C. Panorama

D. WildFire

Implementation of which PAN-OS feature improves visibility and prevention of malware?

A. Anti-Spyware profiles

B. Data Filtering profiles

C. Decryption profiles

D. Antivirus profiles