Download Palo Alto Networks.PSE-Strata.VCEplus.2024-08-20.91q.vcex

Download Exam

File Info

Exam Palo Alto Networks System Engineer -Strata
Number PSE-Strata
File Name Palo Alto Networks.PSE-Strata.VCEplus.2024-08-20.91q.vcex
Size 665 KB
Posted Aug 20, 2024
Download Palo Alto Networks.PSE-Strata.VCEplus.2024-08-20.91q.vcex

ProfExam Suite - Black Friday

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase

Coupon: MASTEREXAM
With discount: 20%





Demo Questions

Question 1

Decryption port mirroring is now supported on which platform?


  1. all hardware-based and VM-Series firewalls with the exception of VMware NSX. Citrix SDX, or public cloud hypervisors
  2. in hardware only
  3. only one the PA-5000 Series and higher
  4. all hardware-based and VM-Series firewalls regardless of where installed
Correct answer: D



Question 2

Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.


  1. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
  2. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25
  3. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25
  4. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
Correct answer: C



Question 3

As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?


  1. access key ID
  2. secret access key
  3. administrative Password
  4. AWS account ID
Correct answer: A
Explanation:
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-prisma-saas/begin-scanning-an-amazon-s3-app.html
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-prisma-saas/begin-scanning-an-amazon-s3-app.html



Question 4

Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?


  1. Generate a Stats Dump File and upload it to the Palo Alto Networks support portal
  2. Select Panorama > Licenses and click Activate feature using authorization code
  3. Generate a Tech Support File and call PANTAC
  4. Select Device > Licenses and click Activate feature using authorization code
Correct answer: B



Question 5

What is the basis for purchasing Cortex XDR licensing?


  1. volume of logs being processed based on Datalake purchased
  2. number of nodes and endpoints providing logs
  3. unlimited licenses
  4. number of NGFWs
Correct answer: B
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licenses/migrate-your-cortex-xdr-license



Question 6

Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)


  1. User Mapping
  2. Proxy Authentication
  3. Group Mapping
  4. 802.1X Authentication
Correct answer: AC
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id



Question 7

Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)


  1. breach the perimeter
  2. weaponize vulnerabilities
  3. lateral movement
  4. exfiltrate data
  5. recon the target
  6. deliver the malware
Correct answer: ACDF



Question 8

Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)


  1. define an SSL decryption rulebase
  2. enable User-ID
  3. validate credential submission detection
  4. enable App-ID
  5. define URL Filtering Profile
Correct answer: BCE
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/preventcredential-phishing.html
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/preventcredential-phishing.html



Question 9

An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?


  1. Create a footnote within the SLR generation tool
  2. Edit the Key-Findings text to list the other types of categories that may be of interest
  3. Remove unwanted categories listed under 'High Risk' and use relevant information
  4. Produce the report and edit the PDF manually
Correct answer: C



Question 10

Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)


  1. eDirectory monitoring
  2. Client Probing
  3. SNMP server
  4. TACACS
  5. Active Directory monitoring
  6. Lotus Domino
  7. RADIUS
Correct answer: BDG
Explanation:
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-idconcepts/user-mapping
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/user-id/user-idconcepts/user-mapping









CONNECT US

Twitter

Mastodon

Facebook

PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount!

Get Now!


HOW TO OPEN VCEX FILES

Use ProfExam Simulator to open VCEX files