[2023] Free PSE-Strata Exam Dumps to Pass Exam Easily
PSE-Strata Exam Dumps, PSE-Strata Practice Test Questions
NEW QUESTION # 113
Which task would be identified in Best Practice Assessment tool?
- A. identify the visibility and presence of command-and-control sessions
- B. identify and provide recommendations for device management access
- C. identify the threats associated with each application
- D. identify sanctioned and unsanctioned SaaS applications
Answer: D
NEW QUESTION # 114
What are the two group options for database when creating a custom report? (Choose two)
- A. SQL
- B. Detailed Logs
- C. Summary Databases
- D. Oracle
Answer: B,C
NEW QUESTION # 115
What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)
- A. It should be used to demonstrate the power of the platform.
- B. It should be used to create pipeline and customer interest.
- C. It should be led by Palo Alto Network employees.
- D. The required equipment should be shipped to lab site in advance.
- E. The lab documentation should be reviewed and tested.
Answer: A,B,E
NEW QUESTION # 116
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
- A.
- B.
- C.
- D.
Answer: A
Explanation:
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands- for-sd-wan-tasks.html
NEW QUESTION # 117
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. Zip
- B. 7-Zip
- C. ELF
- D. RAR
Answer: B,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
NEW QUESTION # 118
Which two of the following does decryption broker provide on a NGFW? (Choose two.)
- A. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
- B. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
- C. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times
- D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
Answer: B,D
NEW QUESTION # 119
Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two)
- A. Network Tab
- B. Monitor Tab
- C. Policies Tab
- D. Device Tab
- E. Objects Tab
Answer: A,D
Explanation:
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web- interface/ panorama-templates/template-stacks
NEW QUESTION # 120
Which two components must be configured within User-ID on a new firewall that has been implemented?
(Choose two.)
- A. User Mapping
- B. 802.1X Authentication
- C. Proxy Authentication
- D. Group Mapping
Answer: A,D
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id
NEW QUESTION # 121
Which two products can send logs to the Cortex Data Lake? (Choose two.)
- A. AutoFocus
- B. Prisma Access
- C. Prisma Public Cloud
- D. PA-3260 firewall
Answer: B,D
NEW QUESTION # 122
When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?
- A. Content type
- B. X-Forwarded-For
- C. HTTP response status code
- D. HTTP method
Answer: B
NEW QUESTION # 123
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)
- A. Database
- B. Connector
- C. Schedule
- D. Recipient
- E. Attribute
- F. Operator
Answer: B,E,F
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/monitoring/view-and-manage- reports/generate-custom-reports
NEW QUESTION # 124
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report?
(Choose two.)
- A. Daily
- B. Bi-weekly
- C. Weekly
- D. Monthly
Answer: A,C
NEW QUESTION # 125
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: C
Explanation:
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-tasks.html
NEW QUESTION # 126
What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?
- A. Store updates on an intermediary server and point all the firewalls to it
- B. Utilize dynamic updates with an aggressive update schedule
- C. Run a Perl script to regularly check for updates and alert when one in released
- D. Monitor update announcements and manually push updates to firewalls
Answer: D
NEW QUESTION # 127
What action would address the sub-optimal traffic path shown in the figure?
Key:
RN - Remote Network
SC - Service Connection
MU GW - Mobile User Gateway
- A. Onboard a Service Connection in the Americas region
- B. Onboard a Remote Network location in the EMEA region
- C. Onboard a Service Connection in the APAC region
- D. Remove the Service Connection in the EMEA region
Answer: C
NEW QUESTION # 128
Which statement best describes the business value of Palo Alto Networks Zero Touch Provisioning (ZTP)?
- A. It is designed to simplify and automate the onboarding of new firewalls to the Panorama management server.
- B. When the service is purchased, Palo Alto Networks sends an engineer to physically deploy the firewall to the customer environment
- C. It allows a firewall to be automatically connected to the local network wirelessly
- D. When it is in place, it removes the need for an onsite firewall
Answer: A
NEW QUESTION # 129
WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through. Which command returns a valid result to verify the ML is working from the command line.
- A. show wfml cloud-status
- B. show av cloud-status
- C. show ml cloud-status
- D. show mlav cloud-status
Answer: D
NEW QUESTION # 130
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?
- A. M-200
- B. Panorama VM-Series
- C. M-600
- D. M-100
Answer: B
NEW QUESTION # 131
Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?
- A. Select Panorama > Licenses and click Activate feature using authorization code
- B. Generate a Stats Dump File and upload it to the Palo Alto Networks support portal
- C. Generate a Tech Support File and call PANTAC
- D. Select Device > Licenses and click Activate feature using authorization code
Answer: A
NEW QUESTION # 132
......
PSE-Strata Exam Dumps, PSE-Strata Practice Test Questions: https://pass4sures.realvce.com/PSE-Strata-VCE-file.html