Free Practice Questions for Palo Alto Networks PSE-Strata Exam

Question 1

How do you configure the rate of file submissions to WildFire in the NGFW?

Abased on the purchased license uploaded

BQoS tagging

Cmaximum number of files per minute

Dmaximum number of files per day

Correct Answer: C. maximum number of files per minute

Explanation:

https://www.paloaltonetworks.com/documentation/80/wildfire/wf_admin/submit-files-for-wildfire-analysis/firewall-file-forwarding-capacity-by-model

Question 2

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

ARun a Perl script to regularly check for updates and alert when one is released

BMonitor update announcements and manually push updates to Crewall

CStore updates on an intermediary server and point all the firewalls to it

DUse dynamic updates with the most aggressive schedule required by business needs

Correct Answer: D. Use dynamic updates with the most aggressive schedule required by business needs

Question 3

A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.

Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

AInforms WildFire and sends up a signature to the Cloud

BCollects forensic information about the event

CCommunicates the status of the endpoint to the ESM

DNotifies the user about the event

ERemediates the event by deleting the malicious file

Correct Answer: B. Collects forensic information about the event; C. Communicates the status of the endpoint to the ESM; D. Notifies the user about the event

Explanation:

https://investors.paloaltonetworks.com/node/11156/html

Question 4

A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types.

The customer uses a firewall with User-ID enabled

Which feature must also be enabled to prevent these attacks?

AContent Filtering

BWildFire

CCustom App-ID rules

DApp-ID

Correct Answer: B. WildFire

Question 5

Which three platform components can identify and protect against malicious email links? (Choose three.)

AWildFire hybrid cloud solution

BWildFire public cloud

CWF-500

DM-200

EM-600

Correct Answer: B. WildFire public cloud; C. WF-500; D. M-200

Question 6

WildFire subscription supports analysis of which three types? (Choose three.)

AGIF

B7-Zip

CFlash

DRPM

EISO

FDMG

Correct Answer: B. 7-Zip; C. Flash; E. ISO

Question 7

Which two configuration elements can be used to prevent abuse of stolen credentials? (Choose two.)

AWildFire analysis

BDynamic user groups (DUGs)

CMulti-factor authentication (MFA)

DURL Filtering Profiles

Correct Answer: C. Multi-factor authentication (MFA); D. URL Filtering Profiles

Question 8

Prisma SaaS provides which two SaaS threat prevention capabilities? (Choose two)

Ashellcode protection

Bfile quarantine

CSaaS AppID signatures

DWildFire analysis

Eremote procedural call (RPC) interrogation

Correct Answer: C. SaaS AppID signatures; D. WildFire analysis

Question 9

Within the Five-Step Methodology of Zero Trust, in which step would application access and user access be defined?

AStep 3: Architect a Zero Trust Network

BStep 5. Monitor and Maintain the Network

CStep 4: Create the Zero Trust Policy

DStep 1: Define the Protect Surface

EStep 2 Map the Protect Surface Transaction Flows

Correct Answer: D. Step 1: Define the Protect Surface

Question 10

In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)

ASaaS reports

Bdata filtering logs

CWildFire analysis reports

Dthreat logs

Ebotnet reports

Correct Answer: C. WildFire analysis reports; D. threat logs; E. botnet reports