Palo Alto Networks System Engineer Professional - Strata Exam

Question 1

Which two features can be enabled to support asymmetric routing with redundancy on a Palo Alto networks next-generation firewall (NGFW)? (Choose two.)

A. Active / active high availability (HA)

B. Multiple virtual systems

C. non-SYN first packet

D. Asymmetric routing profile

Correct Answer: A,C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security.
The firewall provides which three types of reports? (Choose three.)

A. PDF Summary Reports

B. SNMP Reports

C. Netflow Reports

D. User or Group Activity Reports

E. Botnet Reports

Correct Answer: A,D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

A service provider has acquired a pair of PA-7080s for its data center to secure its customer base's traffic. The server provider's traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?

A. PA-7000-20GQ-NPC

B. PA-7000-40G-NPC

C. PA-7000-20G-NPC

D. PA-7000-20GQXM-NPC

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

A. Endpoints access files from a removable drive

B. Identified vulnerability exploits

C. Launch of an identified malware executable file

D. Suspicious host behavior

Correct Answer: B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.
How is this goal accomplished?

A. Submit a request to Palo Alto Networks to change the behavior at the next update

B. Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

C. Add a correlation object that tracks the occurrences and triggers above the desired threshold

D. Create a custom spyware signature matching the known signature with the time attribute

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

A. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-LGS-1TB-1YR

C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x
PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25

D. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x
PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?

A. There are no benefits other than slight performance upgrades

B. It allows Palo Alto Networks to add new functions to existing hardware

C. Only one processor is needed to complete all the functions within the box

D. It allows Palo Alto Networks to add new devices to existing hardware

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

A. Access to the WildFire API

B. 5 minute WildFire updates to threat signatures

C. PE file upload to WildFire

D. WildFire hybrid deployment

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

A. Inputs

B. Feed Base URL

C. Prototype

D. Class

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Palo Alto Networks System Engineer Professional - Strata - PSE-Strata Exam Practice Test

Latest Update

Useful Links

Contact Us