Palo Alto Networks PSE Strata - Palo Alto Networks System Engineer Professional - Strata Exam
Page: 3 / 28
Total 136 questions
Question #11 (Topic: Single Topic)
Which two features are found in Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)
A. Policy match is based on application
B. Traffic control is based on IP, port, and protocol
C. Traffic is separated by zones
D. Identification of application is possible on any port
Answer: AD
Question #12 (Topic: Single Topic)
For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same
Prisma Access location servicing a single Datacenter? (Choose two.)
Prisma Access location servicing a single Datacenter? (Choose two.)
A. Network segments in the Datacenter need to be advertised to only one Service Connection
B. The customer edge device needs to support policy-based routing with symmetric return functionality
C. The resources in the Datacenter will only be able to reach remote network resources that share the same region
D. A maximum of four service connections per Datacenter are supported with this topology
Answer: AD
Question #13 (Topic: Single Topic)
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
A. use of device management access and settings
B. identify sanctioned and unsanctioned SaaS applications
C. expose the visibility and presence of command-and-control sessions
D. measure the adoption of URL filters, App-ID, User-ID
E. use of decryption policies
Answer: BDE
Question #14 (Topic: Single Topic)
You have a prospective customer that is looking for a way to provide secure temporary access to contractors for a designated period of time. They currently add
contractors to existing user groups and create ad hoc policies to provide network access. They admit that once the contractor no longer needs access to the
network, administrators are usually too busy to manually delete policies that provided access to the contractor. This has resulted in over-provisioned access that
has allowed unauthorized access to their systems.
They are looking for a solution to automatically remove access for contractors once access is no longer required.
You address their concern by describing which feature in the NGFW?
contractors to existing user groups and create ad hoc policies to provide network access. They admit that once the contractor no longer needs access to the
network, administrators are usually too busy to manually delete policies that provided access to the contractor. This has resulted in over-provisioned access that
has allowed unauthorized access to their systems.
They are looking for a solution to automatically remove access for contractors once access is no longer required.
You address their concern by describing which feature in the NGFW?
A. Dynamic User Groups
B. Dynamic Address Groups
C. Multi-factor Authentication
D. External Dynamic Lists
Answer: A
Question #15 (Topic: Single Topic)
Which methods are used to check for Corporate Credential Submissions? (Choose three.)
A. Group Mapping
B. IP User Mapping
C. LDAP query
D. Domain Credential Filter
E. User ID Credential Check
Answer: ABD
