[Oct 13, 2024] PSE-Strata Exam Dumps PDF Guaranteed Success with Accurate & Updated Questions
Pass PSE-Strata Exam - Real Test Engine PDF with 141 Questions
NEW QUESTION # 84
Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server?
(Choose three.)
- A. Enterprise Administrators
- B. Event Log Readers
- C. Domain Administrators
- D. Server Operator
- E. Distributed COM Users
Answer: B,C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/user-identification/device-user-identific
NEW QUESTION # 85
Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- A. virtual wire
- B. Layer 2
- C. transparent bridge
- D. Layer 3
Answer: C,D
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-broker/decryption-broker-con
NEW QUESTION # 86
In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?
- A. HA3
- B. HA2
- C. HA4
- D. HA1
Answer: B
Explanation:
https://docs.paloaltonetworks.com/vm-series/8-1/vm-series-deployment/set-up-the-vm-series- firewall-on-aws/high-availability-for-vm-series-firewall-on-aws/configure-activepassive-ha-on- aws.html
NEW QUESTION # 87
How do Highly Suspicious artifacts in-AutoFocus help identify when an unknown, potential zero- day, targeted attack occur to allow one to adjust the security posture?
- A. Highly Suspicious artifacts are High Risk artifacts that have been seen in very few samples.
- B. Highly Suspicious artifacts are associated with High-Risk payloads that are inflicting massive amounts of damage to end customers.
- C. All High Risk artifacts are automatically classified as Highly Suspicious.
- D. Highly Suspicious artifacts have been seen infecting a broad, significant range of companies.
Answer: A
NEW QUESTION # 88
What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?
- A. Store updates on an intermediary server and point all the firewalls to it
- B. Monitor update announcements and manually push updates to firewalls
- C. Utilize dynamic updates with an aggressive update schedule
- D. Run a Perl script to regularly check for updates and alert when one in released
Answer: B
NEW QUESTION # 89
Which built-in feature of PAN-OS allows the NGFW administrator to create a policy that provides autoremediation for anomalous user behavior and malicious activity while maintaining user visibility?
- A. tagging groups
- B. remote device User-ID groups
- C. Dynamic user groups (DUGS)
- D. dynamic address groups (DAGs)
Answer: C
Explanation:
Dynamic User Groups (DUGs) is a built-in feature of PAN-OS that allows NGFW administrators to create policies that provide auto-remediation for anomalous user behavior and malicious activity while maintaining user visibility. DUGs dynamically update group membership based on user attributes and behavior, enabling real-time policy enforcement and automatic response to security incidents.
NEW QUESTION # 90
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: A
Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task
NEW QUESTION # 91
The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security The firewall provides which three types of reports? (Choose three.)
- A. User or Group Activity Reports
- B. SNMP Reports
- C. Botnet Reports
- D. PDF Summary Reports
- E. Netflow Reports
Answer: A,C,E
NEW QUESTION # 92
Which two platform components can identify and protect against malicious email links? (Choose two.)
- A. Panorama plugin
- B. WildFire appliance
- C. WildFire public cloud
- D. Panorama appliance
Answer: B,C
NEW QUESTION # 93
In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)
- A. EDL
- B. API
- C. CSV
- D. TXT
Answer: A,B
Explanation:
PAN-OS software can consume MineMeld outputs in two primary ways:
* API (Application Programming Interface): This method allows direct integration where PAN-OS can pull MineMeld indicators through API calls, facilitating real-time data exchange and automation in threat intelligence.
* EDL (External Dynamic Lists): PAN-OS can consume MineMeld outputs by configuring EDLs, which are lists of indicators (such as IP addresses, domains, or URLs) that can be dynamically updated and referenced in security policies (Palo Alto Networks) (Palo Alto Networks).
NEW QUESTION # 94
What are the two group options for database when creating a custom report? (Choose two)
- A. Oracle
- B. Detailed Logs
- C. SQL
- D. Summary Databases
Answer: B,D
NEW QUESTION # 95
What are two ways to manually add and remove members of dynamic user groups (DUGs)?
(Choose two)
- A. Tag the user using Panorama or the Web Ul of the firewall.
- B. Tag the user through the firewalls XML API.
- C. Tag the user through Active Directory
- D. Add the user to an external dynamic list (EDL).
Answer: A,B
NEW QUESTION # 96
Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)
- A. Group Mapping
- B. 802.1X Authentication
- C. User Mapping
- D. Proxy Authentication
Answer: A,C
NEW QUESTION # 97
You have enabled the WildFire ML for PE files in the antivirus profile and have added the profile to the appropriate firewall rules. When you go to Palo Alto Networks WildFire test av file and attempt to download the test file it is allowed through. In order to verify that the machine learning is working from the command line, which command returns a valid result?
- A. show ml cloud-status
- B. show wfav cloud-status
- C. show wfml cloud-status
- D. show mlav cloud-status
Answer: D
NEW QUESTION # 98
Which two statements correctly describe what a Network Packet Broker does for a Palo Alto Networks NGFW? (Choose two.)
- A. It eliminates the need for a third-party SSL decryption option, which reduces the total number of third-party devices performing decryption.
- B. It allows SSL decryption to be offloaded to the NGFW and traffic to be decrypted multiple times.
- C. It allows SSL decryption to be offloaded to the NGFW and traffic to be decrypted only once.
- D. It provides a third-party SSL decryption option, which can increase the total number of third-party devices performing analysis and enforcement.
Answer: A,C
NEW QUESTION # 99
What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?
- A. discard the request and all subsequent responses
- B. block the query
- C. temporarily disable the DNS Security function
- D. allow the request and all subsequent responses
Answer: D
Explanation:
When a Palo Alto Networks next-generation firewall (NGFW) is unable to retrieve a DNS verdict from the DNS cloud service within the configured lookup time, it will allow the request and all subsequent responses.
This is to ensure that legitimate traffic is not disrupted due to the inability to obtain a verdict in a timely manner.
* Default Behavior:
* The firewall is designed to maintain network availability and reliability. If it cannot retrieve a DNS verdict, it defaults to allowing the traffic to prevent unnecessary disruption.
NEW QUESTION # 100
What will best enhance security of a production online system while minimizing the impact for the existing network?
- A. virtual systems
- B. active / active high availability (HA)
- C. Virtual wire
- D. Layer 2 interfaces
Answer: C
Explanation:
Using a virtual wire (vWire) interface configuration can enhance the security of a production online system while minimizing the impact on the existing network.
* Virtual Wire:
* A vWire interface operates transparently at Layer 2, allowing the firewall to inspect traffic without making changes to the existing network topology.
* This mode is ideal for inline deployments where minimal changes to the network configuration are desired.
NEW QUESTION # 101
A large number of next-generation firewalls (NGFWs), along with Panorama and WildFire have been positioned for a prospective customer. The customer is concerned about storing retrieving and archiving firewall logs and has indicated that logs must be retained for a minimum of 60 days.
An additional requirement is ingestion of a maximum of 10,000 logs per second.
What will best meet the customer's logging requirements?
- A. A pair of fully populated M-300 storage appliances
- B. Appropriately sized NGFW based on use of the POPSICLE tool
- C. Appropriate Data Lake storage determined by using the Data Lake Calculator
- D. NGFWs that have at least 10TB of internal storage
Answer: C
NEW QUESTION # 102
When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered?
(Choose two.)
- A. agent size and OS
- B. retention requirements
- C. Traps agent forensic data
- D. the number of Traps agents
Answer: B,D
Explanation:
When sizing the Cortex Data Lake for Traps Management Service, two key factors must be considered:
* Retention Requirements: It is essential to determine how long the logs and data need to be retained in the Cortex Data Lake. This affects the overall storage capacity required, as longer retention periods will necessitate more storage space (Palo Alto Networks) (Palo Alto Networks).
* The Number of Traps Agents: The total number of Traps agents deployed will directly impact the volume of data being generated and sent to the Cortex Data Lake. More agents mean more data, which in turn requires a larger data lake capacity to handle the increased load (Palo Alto Networks) (Palo Alto Networks).
NEW QUESTION # 103
Which methods are used to check for Corporate Credential Submissions? (Choose three.)
- A. Group Mapping
- B. LDAP query
- C. IP User Mapping
- D. Domain Credential Filter
- E. User ID Credential Check
Answer: A,C,D
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential- phishing/methods-to-check-for-corporate-credential-submissions.html#id29eff481-13de-45b9- b73c-83e2e932ba20
NEW QUESTION # 104
Which statement is true about Deviating Devices and metrics?
- A. A metric health baseline is determined by averaging the health performance for a given metric over seven days plus the standard deviation
- B. Deviating Device Tab is only available with a SD-WAN Subscription
- C. An Administrator can set the metric health baseline along with a valid standard deviation
- D. Deviating Device Tab is only available for hardware-based firewalls
Answer: A
Explanation:
The metric health baseline for devices is typically calculated by taking the average performance of a specific metric over a period (such as seven days) and then adding the standard deviation to account for variability.
This helps in identifying deviations from normal performance, which can indicate potential issues or anomalies in device behavior.
References:
* Network Performance Monitoring and Diagnostics (NPMD) methodologies
* ITIL (Information Technology Infrastructure Library) standards for performance baselines
NEW QUESTION # 105
The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTP decoder for URL filtering is handled by which component in the NGFW?
- A. Security Processing Engine
- B. Stream-based Signature Engine
- C. First Packet Processor
- D. SIA (Scan It All) Processing Engine
Answer: B
NEW QUESTION # 106
WildFire can discover zero-day malware in which three types of traffic? (Choose three)
- A. DNS
- B. HTTPS
- C. SMTP
- D. TFTP
- E. FTP
Answer: B,C,E
NEW QUESTION # 107
When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?
- A. 10MB to 30 MB
- B. 1MB to 5 MB
- C. 100MB to 200 MB
- D. 1500 to 2500 bytes
Answer: B
Explanation:
When sizing the Cortex Data Lake for Prisma Access mobile users, the valid log size range per day per user is typically between 1MB to 5MB. This estimation accounts for the logs generated from various user activities, including web browsing, application usage, and security events. Properly sizing the log storage is essential for ensuring adequate space and optimal performance of the Cortex Data Lake.
References:
* Palo Alto Networks Cortex Data Lake Sizing Guide
* Palo Alto Networks Prisma Access Documentation
NEW QUESTION # 108
......
Get New PSE-Strata Certification Practice Test Questions Exam Dumps: https://www.prep4pass.com/PSE-Strata_exam-braindumps.html
Real PSE-Strata Exam Dumps Questions Valid PSE-Strata Dumps PDF: https://drive.google.com/open?id=1YITjqh2itT_SR-A2yEnQFEVC_vPzK5Yx
