Black Friday Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70percent

Paloalto Networks PSE-SASE Palo Alto Networks System Engineer Professional - SASE Exam Exam Practice Test

Demo: 9 questions
Total 65 questions

Palo Alto Networks System Engineer Professional - SASE Exam Questions and Answers

Question 1

Which type of access allows unmanaged endpoints to access secured on-premises applications?

Options:

A.

manual external gateway

B.

secure web gateway (SWG)

C.

GlobalProtect VPN for remote access

D.

Prisma Access Clientless VPN

Question 2

What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?

Options:

A.

Users, devices, and apps are identified no matter where they connect from.

B.

Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.

C.

Complexity of connecting to a gateway is increased, providing additional protection.

D.

Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.

Question 3

In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access 1.8?

Options:

A.

License bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.

B.

License bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.

C.

License bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.

D.

License bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.

Question 4

Which two services are provided by Prisma Access Insights? (Choose two.)

Options:

A.

summary overview screen of the health and performance of an organization's entire Prisma Access environment

B.

configuration of the on-premises firewall located behind the service-connection termination

C.

detection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise's data

D.

multiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure

Question 5

In which step of the Five-Step Methodology for implementing the Zero Trust model are the services most valuable to the company defined?

Options:

A.

Step 2: Map the transaction flows

B.

Step 4: Create the Zero Trust policy

C.

Step 5: Monitor and maintain the network

D.

Step 1: Define the protect surface

Question 6

Which statement applies to Prisma Access licensing?

Options:

A.

Internet of Things (IOT) Security is included with each license.

B.

It provides cloud-based, centralized log storage and aggregation.

C.

It is a perpetual license required to enable support for multiple virtual systems on PA-3200 Series firewalls.

D.

For remote network and Clean Pipe deployments, a unit is defined as 1 Mbps of bandwidth.

Question 7

In which step of the Five-Step Methodology for implementing the Zero Trust model is the Kipling Method relevant?

Options:

A.

Step 3: Architect a Zero Trust network

B.

Step 5: Monitor and maintain the network

C.

Step 4: Create the Zero Trust policy

D.

Step 2: Map the transaction flows

Question 8

Which two point products are consolidated into the Prisma secure access service edge (SASE) platform? (Choose two.)

Options:

A.

Autonomous Digital Experience Management (ADEM)

B.

firewall as a service (FWaaS)

C.

Threat Intelligence Platform (TIP)

D.

security information and event management (SIEM)

Question 9

How does SaaS Security Inline provide a consistent management experience?

Options:

A.

user credentials required before accessing the resource

B.

uses advanced predictive analysis and machine learning (ML)

C.

automatically forwards samples for WildFire analysis

D.

integrates with existing security

Demo: 9 questions
Total 65 questions