Get ready to pass the PSE-Strata Exam right now using our Palo Alto Networks Systems Engineer  Exam Package

A fully updated 2021 PSE-Strata Exam Dumps exam guide from training expert VCE4Dumps

NEW QUESTION 25
When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

• A. 1MB to 5 MB
• B. 1500 to 2500 bytes
• C. 100MB to 200 MB
• D. 10MB to 30 MB

Answer: C

 

NEW QUESTION 26
An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

• A. DNS Sinkholing
• B. DNS Proxy
• C. Anti-Spyware Signatures
• D. Wildfire Analysis

Answer: A

 

NEW QUESTION 27
Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)

• A. FTP
• B. RTP
• C. HTTPS
• D. HTTP

Answer: C,D

 

NEW QUESTION 28
A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.
How is this goal accomplished?

• A. Create a custom spyware signature matching the known signature with the time attribute
• B. Submit a request to Palo Alto Networks to change the behavior at the next update
• C. Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency
• D. Add a correlation object that tracks the occurrences and triggers above the desired threshold

Answer: A

 

NEW QUESTION 29
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

• A. Operator
• B. Recipient
• C. Database
• D. Connector
• E. Schedule
• F. Attribute

Answer: A,D,F

 

NEW QUESTION 30
Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

• A. Group Mapping
• B. Proxy Authentication
• C. User Mapping
• D. 802.1X Authentication

Answer: A,C

Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id

 

NEW QUESTION 31
What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)

• A. Grayware
• B. Spyware
• C. Benign
• D. Phishing
• E. Malicious

Answer: A,C,D,E

 

NEW QUESTION 32
A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?

• A. PA-7000-20GQXM-NPC
• B. PA-7000-20G-NPC
• C. PA-7000-20GQ-NPC
• D. PA-7000-40G-NPC

Answer: A

 

NEW QUESTION 33
Which task would be identified in Best Practice Assessment tool?

• A. identify and provide recommendations for device management access
• B. identify the visibility and presence of command-and-control sessions
• C. identify sanctioned and unsanctioned SaaS applications
• D. identify the threats associated with each application

Answer: C

 

NEW QUESTION 34
An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites. The URL categories being chosen by default in the report are not highlighting these types of websites. How should the SE show the customer the firewall can detect that these websites are being accessed?

• A. Create a footnote within the SLR generation tool
• B. Edit the Key-Findings text to list the other types of categories that may be of interest
• C. Produce the report and edit the PDF manually
• D. Remove unwanted categories listed under 'High Risk' and use relevant information

Answer: D

 

NEW QUESTION 35
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

• A. Traffic control is based on IP port, and protocol
• B. Identification of application is possible on any port
• C. Traffic is separated by zones
• D. Policy match is based on application

Answer: B,D

 

NEW QUESTION 36
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)

B)

C)

D)

• A. Option
• B. Option
• C. Option
• D. Option

Answer: D

Explanation:
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task

 

NEW QUESTION 37
Which two types of security chains are supported by the Decryption Broker? (Choose two.)

• A. virtual wire
• B. transparent bridge
• C. Layer 3
• D. Layer 2

Answer: B,C

Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-broker/decryption-broker-concepts/decryption-broker-security-chains-multiple.html

 

NEW QUESTION 38
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

• A. 18 bytes
• B. 8MB
• C. 1500 bytes
• D. depends on the Cortex Data Lake tier purchased

Answer: C

 

NEW QUESTION 39
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)

• A. 7-Zip
• B. Zip
• C. ELF
• D. RAR

Answer: A,D

Explanation:
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support

 

NEW QUESTION 40
When having a customer pre-sales call, which aspects of the NGFW should be covered?

• A. The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
• B. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing
• C. The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content - malware, phishing, and C2 are updated every five minutes - to ensure that you can manage access to these sites within minutes of categorization
• D. The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor

Answer: B

 

NEW QUESTION 41
The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security.
The firewall provides which three types of reports? (Choose three.)

• A. Botnet Reports
• B. SNMP Reports
• C. Netflow Reports
• D. User or Group Activity Reports
• E. PDF Summary Reports

Answer: A,C,D

 

NEW QUESTION 42
In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

• A. HA4
• B. HA1
• C. HA3
• D. HA2

Answer: D

 

NEW QUESTION 43
Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

• A. a unique Decryption policy rule is required per security chain
• B. dedicated pair of decryption forwarding interfaces required per security chain
• C. a unique Transparent Bridge Decryption Forwarding Profile to a single Decryption policy rule
• D. a single pair of decryption forwarding interfaces

Answer: A,C

 

NEW QUESTION 44
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

• A. 18 bytes
• B. 8MB
• C. 1500 bytes
• D. depends on the Cortex Data Lake tier purchased

Answer: C

Explanation:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVMCA0

 

NEW QUESTION 45
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

• A. secret access key
• B. access key ID
• C. administrative Password
• D. AWS account ID

Answer: B

Explanation:
Explanation
https://docs.paloaltonetworks.com/prisma/prisma-saas/prisma-saas-admin/secure-cloud-apps/add-cloud-apps-to-p

 

NEW QUESTION 46
......

Master 2021 Latest The Questions Palo Alto Networks Systems Engineer and Pass PSE-Strata  Real Exam!: https://www.vce4dumps.com/PSE-Strata-valid-torrent.html

Practice To PSE-Strata - VCE4Dumps Remarkable Practice On your Palo Alto Networks System Engineer Professional - Strata Exam Exam: https://drive.google.com/open?id=1zHy1SHwuT7bWRemN43IidQpUN9NuXIaQ