[Sep-2022] Palo Alto Networks PSE-Strata Dumps - Secret To Pass in First Attempt
Palo Alto Networks PSE-Strata Exam Dumps [2022] Practice Valid Exam Dumps Question
NEW QUESTION 36
You have enabled the WildFire ML for PE files in the antivirus profile and have added the profile to the appropriate firewall rules. When you go to Palo Alto Networks WildFire test av file and attempt to download the test file it is allowed through. In order to verify that the machine learning is working from the command line, which command returns a valid result?
- A. show wfav cloud-status
- B. show ml cloud-status
- C. show mlav cloud-status
- D. show wfml cloud-status
Answer: C
NEW QUESTION 37
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Quarantine
- B. Alert
- C. Reset
- D. Drop
- E. Redirect
- F. Allow
Answer: B,C,D,F
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
NEW QUESTION 38
A specific URL keeps appearing in URL filtering log entries, it was blocked successfully, but the administrator would like to investigate further.
In which two ways would AutoFocus help this administrator? (Choose two.)
- A. Identify malware campaigns associated with this URL
- B. Generate a correlation object that can be used to monitor associated activities
- C. Generate a list of IP addresses for use in Dynamic Address Groups on the firewall
- D. Identify malicious files associated with this URL
Answer: A,C
NEW QUESTION 39
in which step of the Palo Alto Networks Five-Step Zero Trust Methodology would an organization's critical data, applications, assets, and services (DAAS) be identified?
- A. Step 1: Define the protect surface
- B. Step 4. Create the Zero Trust policy.
- C. Step 2: Map the transaction flows.
- D. Step 3. Architect a Zero Trust network.
Answer: A
NEW QUESTION 40
WildFire can discover zero-day malware in which three types of traffic? (Choose three)
- A. SMTP
- B. FTP
- C. DNS
- D. TFTP
- E. HTTPS
Answer: A,B,E
NEW QUESTION 41
Which three categories are identified as best practices in the Best Practice Assessment tool?
(Choose three.)
- A. expose the visibility and presence of command-and-control sessions
- B. measure the adoption of URL filters, App-ID, User-ID
- C. use of device management access and settings
- D. use of decryption policies
- E. identify sanctioned and unsanctioned SaaS applications
Answer: B,D,E
NEW QUESTION 42
What are two presales selling advantages of using Expedition? (Choose two.)
- A. streamline & migrate to Layer7 policies using Policy Optimizer
- B. reduce effort to implement policies based on App-ID and User-ID
- C. map migration gaps to professional services statement of Works (SOWs)
- D. easy migration process to move to Palo Alto Networks NGFWs
Answer: C,D
NEW QUESTION 43
Which certificate can be used to ensure that traffic coming from a specific server remains encrypted?
- A. SSL exclude certificate
- B. Forward entrust
- C. Forward trust
- D. SSL inbound inspection
Answer: A
Explanation:
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/device/device- certificate-management-ssl-decryption-exclusion
NEW QUESTION 44
What are two advantages of the DNS Sinkholing feature? (Choose two.)
- A. It forges DNS replies to known malicious domains.
- B. It can be deployed independently of an Anti-Spyware Profile.
- C. It can work upstream from the internal DNS server.
- D. It monitors DNS requests passively for malware domains.
Answer: A,C
NEW QUESTION 45
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?
- A. A zone protection profile to the untrust zone
- B. An antivirus profile to security policy rules that deny general web access
- C. A file blocking profile to security policy rules that allow general web access
- D. A vulnerability profile to security policy rules that deny general web access
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/best-practices/8-1/internet-gateway-best-practices/best-practice-internet-gatew
NEW QUESTION 46
When having a customer pre-sales call, which aspects of the NGFW should be covered?
- A. The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor
- B. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing
- C. The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
- D. The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content --malware, phishing, and C2 are updated every five minutes --to ensure that you can manage access to these sites within minutes of categorization
Answer: B
Explanation:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/url-filtering
NEW QUESTION 47
An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.
The customer already has multiple M-100s set up as a log collector group.
What are two valid reasons for deploying Panorama in High Availability? (Choose two.)
- A. Control of post rules
- B. Ensure management continuity
- C. Improve log collection redundancy
- D. Control local firewall rules
Answer: B,C
NEW QUESTION 48
Which two features are found in a next-generation firewall but are absent in a legacy firewall product? (Choose two)
- A. Policy match is a based on application
- B. Traffic control is based on IP, port, and protocol
- C. Traffic is separated by zones
- D. Identification of application is possible on any port
- E. Onboard SSL decryption capability is used
Answer: A,D
NEW QUESTION 49
Which component is needed for a large-scale deployment of NGFWs with multiple Panorama Management Servers?
- A. Panorama Interconnect plugin
- B. M-600 appliance
- C. Palo Alto Networks Cluster license
- D. Panorama Large Scale VPN (LSVPN) plugin
Answer: A
NEW QUESTION 50
What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)
- A. Grayware
- B. Phishing
- C. Spyware
- D. Malicious
- E. Benign
Answer: A,B,D,E
NEW QUESTION 51
What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)
- A. Private key certificates
- B. Intermediate certificates
- C. Self-Signed certificates
- D. Enterprise CA-signed certificates
Answer: C,D
NEW QUESTION 52
......
PSE-Strata Exam Dumps PDF Guaranteed Success with Accurate & Updated Questions: https://actualtests.crampdf.com/PSE-Strata-exam-prep-dumps.html