Palo Alto Networks Accredited Systems Engineer (PSE) - SASE Professional

Question 1

How are Prisma SD-WAN ION appliances licensed?

A. POP or application

B. Branch or data center

C. Application and data center

D. Branch and POP

Correct Answer: B

Question 2

What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?

A. Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.

B. Users, devices, and apps are identified no matter where they connect from.

C. Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.

D. Complexity of connecting to a gateway is increased, providing additional protection.

Correct Answer: B

Question 3

A customer is concerned about performance of their SaaS applications for all end-users. Their users are globally distributed and access local SaaS applications services within their country.
When troubleshooting end-to-end connectivity, they want the quickest way to identify common issues across the entire organization in order to be proactive and remediate them before the end- user needs to open a support ticket.
Which two features would provide visibility and performance enhancements for the customer's SaaS application access? (Choose two.)

A. Prisma Access Browser

B. App Acceleration

C. Prisma SD-WAN

D. ADEM

Correct Answer: C,D

Question 4

What are three ways the secure access service edge (SASE) model can help an organization?
(Choose three.)

A. system-wide proxy

B. Broker VM

C. explicit proxy

D. data protection

Correct Answer: A,C,D

Question 5

What is an advantage of the Palo Alto Networks cloud-based security infrastructure?

A. It provides comprehensive, scalable cloud security with flexible licensing options.

B. It backhauls traffic to the corporate network.

C. It increases the footprint of the security solution.

D. It allows for the elimination of data centers within five years of implementation.

Correct Answer: A

Question 6

What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices? (Choose two.)

A. ensures automatic failover when ION devices experience software or network related failure

B. network controller communication and monitoring

C. control mode insertion without modification of existing network configuration

D. local area network (LAN) Dynamic Host Configuration Protocol (DHCP) and DHCP relay functionality

Correct Answer: A

Question 7

A net new customer has a hard requirement for Active Directory Groups while looking for an SSE solution in order to create policies against a group of users, as opposed to individual users.
Without external hardware, what will enable group mappings to be accomplished with Prisma Access natively?

A. Cloud Identity Engine

B. Authentication profiles

C. User correlation profiles

D. User-ID

Correct Answer: A

Palo Alto Networks Accredited Systems Engineer (PSE) - SASE Professional - PSE-SASE Exam Practice Test

Latest Update

Useful Links

Contact Us