Free PSE Professional Accreditation-Data Center Exam PSE-DataCenter Exam Practice Test

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

• Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance
• Palo Alto Networks AutoFocus generated Correlation Objects
• Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles
• WF-500 configured as private clouds for privacy concerns
• Palo Alto Networks non-firewall products, like Traps and Aperture

What is the default interval for the HA heartbeat ? :

• 100 milliseconds
• 1000 milliseconds
• 2 seconds
• 5 seconds

What is the maximum number of QSFP+ interfaces that can be supported in a PA - 7080, and what is the minimum version of PAN - OS required to support them?

• 12, PAN - OS 6.0
• 12, PAN - OS 6.1
• 12, PAN - OS 7.0
• 20, PAN - OS 6.0
• 20, PAN - OS 6.1
• 20, PAN - OS 7.0

How many more NPCs can fit in a PA - 7080 compared to a PA - 7050?

• Four
• Six
• Eight
• It depends upon whether the front - to - back airflow duct is in use.

Which three of these are valid profiles for configuring HA timers?

• Recommended
• Custom
• Aggressive
• Low - latency
• Advanced

Which statement is true regarding the HA3 interface on VM - Series firewalls in an HA configuration?

• The second VM - Series firewall should be in a different host and the HA3 connection should be over a dedicated high - speed link .
• The second VM - Series firewall should be in the same virtual machine so the HA3 connection does not have to travel over a physical connection .
• The HA3 connection should traverse no more than a single virtual switch.
• There is no HA3 connection on a VM - Series firewall.

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

• Define a custom App-ID to ensure that only legitimate application traffic reaches the server
• Add a DoS Protection Profile with defined session count.
• Add a Vulnerability Protection Profile to block the attack.
• Add QoS Profiles to throttle incoming requests.

Which of these statements is true about Dynamic Address Groups?

• T hey allow you to create a policy that automatically adapts to changes — adds, moves, or deletions of servers.
• They enable the flexibility to apply different rules to th e same server based on tagsthat define its role on the network, the operating system, or the different kinds of traffic it processes.
• A dynamic address group uses tags as a filtering criterion to determine its members.
• The filtering criteria uses logical and , or , and not operators.

Which security component can detect command-and-control traffic sent from multiple endpoints within a corporate data center?

• stateless firewall
• next-generation firewall
• personal endpoint firewall
• port-based firewall

In addition to the expanded capacity for NPCs, what else is improved in the PA - 7080 over the PA - 7050?

• A second LPC is standard.
• A second SMC is standard.
• Front - to - back airflow is standard.
• Available 100Gb p s interfaces , but only with PAN - OS 7.0 and higher