2022 Updated Verified Pass PSE-Strata Study Guides & Best Courses
Ultimate Guide to the PSE-Strata - Latest Edition Available Now
NEW QUESTION 49
What is the basis for purchasing Cortex XDR licensing?
- A. volume of logs being processed based on Datalake purchased
- B. number of nodes and endpoints providing logs
- C. number of NGFWs
- D. unlimited licenses
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/cortex-xdr-overview/cortex-xdr-licen
NEW QUESTION 50
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)
- A. Cortex Data Lake
- B. Traps
- C. Panorama
- D. NGFW with PANOS 8 0.5 or later
- E. Directory Syn Service
- F. Pathfinder
Answer: A,D,E
Explanation:
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-overview/cort
NEW QUESTION 51
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Reset
- B. Allow
- C. Alert
- D. Drop
- E. Redirect
- F. Quarantine
Answer: A,B,C,D
NEW QUESTION 52
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)
- A. Cortex Data Lake
- B. Traps
- C. Panorama
- D. NGFW with PANOS 8 0.5 or later
- E. Directory Syn Service
- F. Pathfinder
Answer: A,D,E
Explanation:
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-overview/cortex-xdr-prevent-architecture
NEW QUESTION 53
In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)
- A. API
- B. CSV
- C. TXT
- D. EDL
Answer: C,D
NEW QUESTION 54
Which two tabs in Panorama can be used to identify templates to define a common base configuration?
(Choose two.)
- A. Objects Tab
- B. Device Tab
- C. Policies Tab
- D. Network Tab
Answer: B,D
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web-interface/panora
NEW QUESTION 55
Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?
- A. Generate a Tech Support File and call PANTAC
- B. Generate a Stats Dump File and upload it to the Palo Alto Networks support portal
- C. Select Device > Licenses and click Activate feature using authorization code
- D. Select Panorama > Licenses and click Activate feature using authorization code
Answer: D
NEW QUESTION 56
Which statement is true about Deviating Devices and metrics?
- A. A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation
- B. Deviating Device Tab is only available with a SD-WAN Subscription
- C. An Administrator can set the metric health baseline along with a valid standard deviation
- D. Deviating Device Tab is only available for hardware-based firewalls
Answer: A
NEW QUESTION 57
Which security profile on the NGFW includes signatures to protect you from brute force attacks?
- A. Zone Protection Profile
- B. Vulnerability Protection Profile
- C. URL Filtering Profile
- D. Anti-Spyware Profile
Answer: B
NEW QUESTION 58
Match the functions to the appropriate processing engine within the dataplane.
Answer:
Explanation:
NEW QUESTION 59
WildFire subscription supports analysis of which three types? (Choose three.)
- A. GIF
- B. ISO
- C. Flash
- D. DMG
- E. 7-Zip
- F. RPM
Answer: B,C,E
NEW QUESTION 60
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product?
(Choose two.)
- A. Traffic control is based on IP port, and protocol
- B. Policy match is based on application
- C. Traffic is separated by zones
- D. Identification of application is possible on any port
Answer: B,D
NEW QUESTION 61
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?
- A. Anti-virus (weekly): Application (daily). Threats (weekly), WildFire (5 minutes)
- B. Anti-virus (daily), Application (weekly), Threats (weekly), WildFire (5 minutes)
- C. Anti-virus (weekly), Application (daily), Threats (daily), WildFire (5 minutes)
- D. Anti-virus (daily), Application (weekly), Threats (daily), WildFire (5 minutes)
Answer: B
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/software-and-content-updates/dynamic-content-upd
NEW QUESTION 62
A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?
- A. PA-7000-20GQXM-NPC
- B. PA-7000-40G-NPC
- C. PA-7000-20G-NPC
- D. PA-7000-20GQ-NPC
Answer: A
NEW QUESTION 63
Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.
- A. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25
- B. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
- C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25
- D. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
Answer: A
NEW QUESTION 64
Which two of the following does decryption broker provide on a NGFW? (Choose two.)
- A. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
- B. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
- C. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
- D. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times
Answer: A,C
NEW QUESTION 65
When having a customer pre-sales call, which aspects of the NGFW should be covered?
- A. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing
- B. The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
- C. The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content - malware, phishing, and C2 are updated every five minutes - to ensure that you can manage access to these sites within minutes of categorization
- D. The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor
Answer: A
NEW QUESTION 66
A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at
100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?
- A. VM-100
- B. VM-300
- C. VM-200
- D. VM-50
Answer: D
NEW QUESTION 67
Which three features are used to prevent abuse of stolen credentials? (Choose three.)
- A. SSL decryption rules
- B. WildFire Profiles
- C. Prisma Access
- D. multi-factor authentication
- E. URL Filtering Profiles
Answer: A,B,D
NEW QUESTION 68
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
- A. measure the adoption of URL filters. App-ID. User-ID
- B. expose the visibility and presence of command-and-control sessions
- C. identify sanctioned and unsanctioned SaaS applications
- D. use of device management access and settings
- E. use of decryption policies
Answer: A,C
NEW QUESTION 69
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. RAR
- B. Zip
- C. ELF
- D. 7-Zip
Answer: A,D
Explanation:
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
NEW QUESTION 70
A client chooses to not block uncategorized websites.
Which two additions should be made to help provide some protection? (Choose two.)
- A. A security policy rule using only known URL categories with the action set to allow
- B. A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites
- C. A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access
- D. A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads
Answer: A,C
NEW QUESTION 71
......
Dumps MoneyBack Guarantee - PSE-Strata Dumps Approved Dumps: https://www.getvalidtest.com/PSE-Strata-exam.html
2022 Updated Verified Pass PSE-Strata Exam - Real Questions & Answers: https://drive.google.com/open?id=1XKLhtjjoLJbamJ5l49i3qzS0-0Eo0o4M