Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
Paloalto Networks
Strata Associate
PSE-Strata-Associate
Palo Alto Networks Systems Engineer (PSE) - Strata Associate Questions and Answers

Pass the Paloalto Networks Strata Associate PSE-Strata-Associate Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam PSE-Strata-Associate Premium Access

View all detail and faqs for the PSE-Strata-Associate exam

Go to Exam

441 Students Passed

94% Average Score

94% Same Questions

Viewing page 1 out of 1 pages

Viewing questions 1-10 out of questions

Questions # 1:

Which deployment method is used to integrate a firewall to be inline in an existing network but does not support additional routing or switching?

Options:

virtual wire

TAP mode

Layer 3

Layer 2

Answer

Questions # 2:

A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.

How will the performance of the firewall be affected if the customer also enables both WildFire and User-ID?

Options:

The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.

Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.

There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.

Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.

Answer

Questions # 3:

Which Next-Generation Firewall (NGFW) deployment model allows an organization to monitor traffic during evaluations without interruption to network traffic?

Options:

Layer 2

TAP mode

virtual wire

Layer 3

Answer

Questions # 4:

Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

Options:

multi-pass

multiple-core threaded

single-pass

no-pass

Answer

Questions # 5:

The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and

received from this website.

Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?

Options:

Forward Proxy

Web Proxy

Certificate Proxy

Inbound Proxy

Answer

Questions # 6:

What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

Options:

micro-segmenting network traffic based on the unique identification number of the content

increasing latency as new threat prevention features are enabled

detecting and preventing known and unknown threats in a single pass

enforcing policy control over unapproved web surfing

proactively identifying and defending against unknown, new, or custom malware and exploits

Answer

C, D, E

Questions # 7:

A Human Resources (HR) application has the URL of https://hr.company.com:4433/.

How should the "Service" column of the Security policy be set to match and permit this application?

Options:

Define and then select a new custom Transmission Control Protocol (TCP) service with port 4433.

Edit "service-https" to use port 4433.

Set to "service-http".

Set to "application-defaults," which will locate and match the HR application.

Answer

Questions # 8:

Which traffic will be blocked when application-default service is set on a Security policy?

Options:

SSH traffic on TCP/22

HTTPS traffic on TCP/443

HTTP traffic on TCP/81

DNS traffic on UDP/53

Answer

Questions # 9:

Which of the following is an appropriate first step for a customer interested in moving to Zero Trust?

Options:

Ask administrators to switch on the Zero Trust options and features of their current products.

Secure the funding required to incorporate the new architecture into their existing networks.

Set priorities by identifying the most valuable and critical assets and data on their networks.

Request a statement of compliance from their IT vendors against the Zero Trust standard.

Answer

Questions # 10:

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?