New Year Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70percent

Paloalto Networks PSE-Strata-Associate Palo Alto Networks Systems Engineer (PSE) - Strata Associate Exam Practice Test

Palo Alto Networks Systems Engineer (PSE) - Strata Associate Questions and Answers

Question 1

Which three of the following are features of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.)

Select 3 Correct Responses

Options:

A.

Login-ID

B.

User-ID

C.

App-ID

D.

Network-ID

E.

SSL/SSH Decrypt

Question 2

An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.

Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses

Options:

A.

Layer 3

B.

TAP mode

C.

Virtual Wire

D.

Layer 2

Question 3

Which three key functions are processed as part of the Palo Alto Networks single-pass architecture (SPA)? (Choose three.)

Select 3 Correct Responses

Options:

A.

User-ID

B.

Content-ID

C.

Intruder-ID

D.

Device-ID

E.

Virus-ID

Question 4

Which section of a Security Lifecycle Review (SLR) report summarizes risk exposure by breaking down a detected attack on the network?

Options:

A.

Advanced URL Filtering Analysis

B.

SaaS Applications

C.

Threats at a Glance

D.

Applications that Introduce Risk

Question 5

What file is needed from a firewall to generate a Security Lifecycle Review (SLR) report when creating the SLR?

Options:

A.

tech support file

B.

Panorama plugin registration file

C.

stats dump file

D.

system process core file

Question 6

Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

Options:

A.

multi-pass

B.

multiple-core threaded

C.

single-pass

D.

no-pass

Question 7

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

Options:

A.

Layer 3 interface

B.

SLR interface

C.

virtual wire interface

D.

TAP interface

Question 8

Which traffic will be blocked when application-default service is set on a Security policy?

Options:

A.

SSH traffic on TCP/22

B.

HTTPS traffic on TCP/443

C.

HTTP traffic on TCP/81

D.

DNS traffic on UDP/53

Question 9

In which two of the following scenarios is personal data excluded from protection under the General Data Protection Regulation (GDPR)?

Select 2 Correct Responses

Options:

A.

The data was automated as part of an information filing system.

B.

The data was generated in the course of a purely personal or household activity.

C.

The data will be used for the prevention of criminal offenses.

D.

The data is related to a person's economic or cultural identity.

Question 10

The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?

Options:

A.

LLDP profiles

B.

security zones

C.

DHCP groups

D.

security profile groups