[Q15-Q37] PSE-Strata-Associate Certification Exam Dumps Questions in here [Jan-2023]

Rate this post

PSE-Strata-Associate Certification Exam Dumps Questions in here [Jan-2023]

Updated PSE-Strata-Associate Exam Practice Test Questions

Q15. Which two of the following are ways that Palo Alto Networks CloudDelivered Security Services (CDSS) use confidential information collected from users? (Choose two.) Select 2 Correct Responses

legal compliance

attack retaliation attribution

verification of entitlements

verification of applicant statements

Q16. What is a technical benefit of User-ID in relation to policy control?

It matches traffic against policy to check whether it is allowed on the network.

It allows all users to designate view-only access to itinerant personnel.

It improves safe enablement of applications traversing the network.

It encrypts all private keys and passwords in the configuration.

Q17. The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?

LLDP profiles

security zones

DHCP groups

security profile groups

Q18. An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.
Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses

Layer 3

TAP mode

Virtual Wire

Layer 2

Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzkCAC
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/hamodes#id15a9d29

Q19. What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

tech support file

Panorama plugin registration file

stats dump file

system process core file

Q20. A firewall enabled as a decryption broker will take which of the following actions?

forward clear text traffic to security chains for additional enforcement

monitor the state of active connections to determine which network packets to allow through

correlate a series of related threat events that indicate a likely compromised host on the network

identify potential denial-of-service (DoS) attacks and take protective action

Q21. A Human Resources (HR) application has the URL of https://hr.company.com:4433/.
How should the “Service” column of the Security policy be set to match and permit this application?

Define and then select a new custom Transmission Control Protocol (TCP) service with port 4433.

Edit “service-https” to use port 4433.

Set to “service-http”.

Set to “application-defaults,” which will locate and match the HR application.

Q22. Which of the following statements applies to WildFire Public Cloud verdicts?

They are unique to the affected Next-Generation Firewall (NGFW).

They are shared globally with all WildFire customers.

They must be manually downloaded from the WildFire portal.

They are automatically shared with third-party firewall vendors.

Q23. Implementation of which PAN-OS feature improves visibility and prevention of malware?

Anti-Spyware profiles

Data Filtering profiles

Decryption profiles

Antivirus profiles

Q24. When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

Layer 3 interface

SLR interface

virtual wire interface

TAP interface

Q25. Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

multi-pass

multiple-core threaded

single-pass

no-pass

Q26. Which feature allows a customer to gain visibility and respond to changes in user behavior or potential threats without manual policy changes?

User-ID agent

dynamic user groups (DUGs)

Lightweight Directory Access Protocol (LDAP) sync

dynamic address objects

Q27. Which of the following is an appropriate first step for a customer interested in moving to Zero Trust?

Ask administrators to switch on the Zero Trust options and features of their current products.

Secure the funding required to incorporate the new architecture into their existing networks.

Set priorities by identifying the most valuable and critical assets and data on their networks.

Request a statement of compliance from their IT vendors against the Zero Trust standard.

Q28. How does Cloud Identity Engine (CIE) simplify deployment of cloudbased services to provide user authentication?

It allows configuration of an authentication source once instead of for each authentication method.

It expands the capability to filter and forward decrypted and non-decrypted Transport Layer Security (TLS) traffic.

It ensures that a compromised master key does not compromise the configuration encryption for an entire deployment.

It authenticates users via a cloud-based service and refers to the hub for mappings for group identification.

Loading …

Pass Strata Associate PSE-Strata-Associate Exam With 37 Questions: https://www.actualcollection.com/PSE-Strata-Associate-exam-questions.html

Leave a comment Cancel reply