Palo Alto Networks PSE Platform Exam Questions (60 Q&As)

1. What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)

It should be used to create pipeline and customer interest.

It should be used to demonstrate the power of the platform.

The lab documentation should be reviewed and tested.

It should be led by Palo Alto Network employees.

The required equipment should be shipped to lab site in advance.

2. Which two designs require virtual systems? (Choose two.)

A shared gateway interface that does not need a full administrative boundary

A virtual router as a replacement for an internet-facing router

A single physical firewall shared by different organizations, each with unique traffic control needs

A VMware NSX deployment that needs micros segmentation

3. Which option is required to activate/retrieve a Device Management License on the M.100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

Generate a Tech Support File and call PANTAC

Select Device > Licenses and click activate feature using authorization code

Select PANORAMA > Licenses and click Activate feature using authorization code

Generate a State Dump File and upload it to the Palo Alto Network support portal

4. The botnet report displays a confidence score of 1 to 5 indicating the likelihood of a botnet infection.

Which three sources are used by the firewall as the basis of this score? (Choose three.)

Bad Certificate Reports

Traffic Type

Botnet Reports

Number of Events

Executable Downloads

Threat Landscape

5. Which profile or policy should be applied to protect against port scans from the internet?

An App-ID security policy rule to block traffic sourcing from the untrust zone

Security profiles to security policy rules for traffic sourcing from the untrust zone

Interface management profile on the zone of the ingress interface

Zone protection profile on the zone of the ingress interface

6. Which two components must to be configured within User-ID on a new firewall that has been implemented? (Choose two.)

Group Mapping

802.1X Authentication

Proxy Authentication

User mapping

7. Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

Client Probing

TACACS

eDirectory monitoring

SNMP server

Lotus Domino

RADIUS

Active Directory monitoring

8. In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two)

Dedicated Logger Mode is required

Logs per second exceed 10,000

Appliance needs to be moved into data center

Device count is under 100

9. How does SSL Forward Proxy decryption work?

SSL Forward Proxy decryption policy decrypts and inspects SSL/TLS traffic from internal users to the web.

The SSL Forward Proxy Firewall creates a certificate intended for the client that is intercepted and altered by the firewall.

If the server’s certificate is signed by a CA that the firewall does not trust, the firewall will use the certificate only on Forward Trust.

The firewall resides between the internal client and internal server to intercept traffic between the two.

10. What are the two group options for database when creating a custom report? (Choose two)

Oracle

SQL

Detailed Logs

Summary Databases

11. Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

WildFire on the firewall, and AutoFocus on Panorama

URL Filtering on the firewall, and MindMeld on Panorama

Threat Prevention on the firewall, and Support on Panorama

GlobalProtect on the firewall, and Threat Prevention on Panorama

12. What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance

Palo Alto Networks AutoFocus generated Correlation Objects

Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles

WF-500 configured as private clouds for privacy concerns

Palo Alto Networks non-firewall products, like Traps and Aperture

13. How do Highly Suspicious artifacts in-AutoFocus help identify when an unknown, potential zero-day, targeted attack occur to allow one to adjust the security posture?

Highly Suspicious artifacts are associated with High-Risk payloads that are inflicting massive amounts of damage to end customers.

All High Risk artifacts are automatically classified as Highly Suspicious.

Highly Suspicious artifacts are High Risk artifacts that have been seen in very few samples.

Highly Suspicious artifacts have been seen infecting a broad, significant range of companies.

14. Because of regulatory compliance a customer cannot decrypt specific types of traffic.

Which license should an SE recommend to the customer who will be decrypting traffic on the Palo Alto Networks firewall?

App-ID, to use applications as match criteria in the decryption policy rules

SSL Decryption, for inbound inspection and granular Forward Proxy SSL decryption

Support, to request custom categories as match criteria in decryption policy rules

URL Filtering, to use predefined URL categories as match criteria in the decryption policy rules

15. How many recursion levels are supported for compressed files in PAN-OS 8.0?

Question 1 of 15

Test Online Palo Alto Networks PSE Platform Free Questions

Leave a Reply Cancel reply