PSE-STRATA-ASSOCIATE Online Practice Questions and Answers

Which feature allows a customer to gain visibility and respond to changes in user behavior or potential threats without manual policy changes?

A. User-ID agent

B. dynamic user groups (DUGs)

C. Lightweight Directory Access Protocol (LDAP) sync

D. dynamic address objects

Which two of the following are benefits of the Palo AltoNetworks Zero Trust architecture? (Choose two.)

Select 2 Correct Responses

A. tighter access control

B. increased detection of threats and infiltration

C. more network segments

D. cloud-based virtual private network (VPN)

Which architecture allows a Palo Alto Networks Next-Generation Firewall (NGFW) to achieve high performance with all security features enabled?

A. single-pass parallel processing

B. dual-pass processing

C. multi-core processing

D. parallel-pass single processing

Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

A. multi-pass

B. multiple-core threaded

C. single-pass

D. no-pass

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

A. Layer 3 interface

B. SLR interface

C. virtual wire interface

D. TAP interface

Which two Cloud-Delivered Security Services (CDSS) would be appropriate for an organization that wants to secure internet traffic on a perimeter firewall? (Choose two.) Select 2 Correct Responses

A. WildFire

B. Advanced URL Filtering (AURLF)

C. Autonomous Digital Experience Management (ADEM)

D. SD-WAN

A Human Resources (HR) application has the URL of https://hr.company.com:4433/.

How should the "Service" column of the Security policy be set to match and permit this application?

A. Define and then select a new custom Transmission Control Protocol (TCP) service with port 4433.

B. Edit "service-https" to use port 4433.

C. Set to "service-http".

D. Set to "application-defaults," which will locate and match the HR application.

Using a comprehensive range of natively-integratedsubscriptions and inline machine learning (ML), what does a Next-Generation Firewall (NGFW) use to prevent known and unknown threats in real time?

A. Cloud Delivered Security Services (CDSS)

B. Cloud Security Posture Management (CSPM)

C. Cloud NativeSecurity Platform (CNSP)

D. Cloud Identity Access Management (CIAM)

Which path will generate a stats dump file on a Palo Alto Networks Next-Generation Firewall (NGFW)?

A. Device > Support > Generate Statsdump

B. Device > Statsdump > Generate Statsdump

C. Device > SLR > Generate Statsdump

D. Device > Files > Generate Statsdump

What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

A. micro-segmenting network traffic based on the unique identification number of the content

B. increasing latency as new threat prevention features are enabled

C. detecting and preventing known and unknown threats in a single pass

D. enforcing policy control over unapproved web surfing

E. proactively identifying and defending against unknown, new, or custom malware and exploits