Palo Alto Networks Systems Engineer Professional - Hardware Firewall

Question 1

Which two tools should a systems engineer use to showcase the benefit of an evaluation that a customer has just concluded?

A. Best Practice Assessment (BPA)

B. Security Lifecycle Review (SLR)

C. Golden Images

D. Firewall Sizing Guide

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

The PAN-OS User-ID integrated agent is included with PAN-OS software and comes in which two forms?
(Choose two.)

A. Cloud Identity Engine (CIE)

B. Windows-based agent

C. Integrated agent

D. GlobalProtect agent

Correct Answer: B,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

A. XML API

B. Captive portal

C. SCP log ingestion

D. User-ID

Correct Answer: A,B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

What would make a customer choose an on-premises solution over a cloud-based SASE solution for their network?

A. Hybrid work and cloud adoption at various locations that have different requirements per site.

B. Most employees and applications in close physical proximity in a geographic region.

C. The need to enable business to securely expand its geographical footprint.

D. High growth phase with existing and planned mergers, and with acquisitions being integrated.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Which two products can be integrated and managed by Strata Cloud Manager (SCM)? (Choose two)

A. VM-Series NGFW

B. Prisma Cloud

C. Cortex XDR

D. Prisma SD-WAN

Correct Answer: A,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

There are no Advanced Threat Prevention log events in a company's SIEM instance. However, the systems administrator has confirmed that the Advanced Threat Prevention subscription is licensed and that threat events are visible in the threat logs on the firewall.
Which action should the systems administrator take next?

A. Enable the company's Threat Prevention license.

B. Check with the SIEM vendor to verify that Advanced Threat Prevention logs are reaching the company's SIEM instance.

C. Have the SIEM vendor troubleshoot its software.

D. Ensure the Security policy rules that use Advanced Threat Prevention are set for log forwarding to the correct SIEM.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

A prospective customer is interested in Palo Alto Networks NGFWs and wants to evaluate the ability to segregate its internal network into unique BGP environments.
Which statement describes the ability of NGFWs to address this need?

A. It cannot be addressed because PAN-OS does not support it.

B. It can be addressed by creating multiple eBGP autonomous systems.

C. It can be addressed with BGP confederations.

D. It cannot be addressed because BGP must be fully meshed internally to work.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Palo Alto Networks Systems Engineer Professional - Hardware Firewall - PSE-Strata-Pro-24 Exam Practice Test

Latest Update

Useful Links

Contact Us