Free PSE Platform Exam PSE-Platform Exam Practice Test

A price sensitive customer wants to prevent attacks on a windows 2008 Virtual Server. The server will max out at 100Mbps but needs to have 45,000 sessions to connect to multiple hosts within a data centerWhich VM instance should be used to secure the network by this customer?

• VM-200
  
• VM-100
  
• VM-300
  
• VM-50
  

When a customer creates a new SLR report, what is the first step in generating a proper SLR report once logged in to the Partner Portal?

• Click the Track my deals button to view your open Opportunities.
  
• Scroll down and click the New Security Lifecycle Review button.
  
• Click the Select files... button and find the relevant statsdump file on your local machine and click Upload.
  
• Select the appropriate Opportunity.
  

How do Highly Suspicious artifacts in-AutoFocus help identify when an unknown, potential zero-day, targeted attack occur to allow one to adjust the security posture?

• Highly Suspicious artifacts are associated with High-Risk payloads that are inflicting massive amounts of damage to end customers.
  
• All High Risk artifacts are automatically classified as Highly Suspicious.
  
• Highly Suspicious artifacts are High Risk artifacts that have been seen in very few samples.
  
• Highly Suspicious artifacts have been seen infecting a broad, significant range of companies.
  

A specific URL keeps appearing in URL filtering log entries, it was blocked successfully, but the administrator would like to investigate further.In which two ways would AutoFocus help this administrator? (Choose two.)

• Generate a list of IP addresses for use in Dynamic Address Groups on the firewall
  
• Identify malicious files associated with this URL
  
• Generate a correlation object that can be used to monitor associated activities
  
• Identify malware campaigns associated with this URL
  

Which two features are found in a next-generation firewall but are absent in a legacy firewall product? (Choose two)

• Identification of application is possible on any port
  
• Traffic is separated by zones
  
• Traffic control is based on IP, port, and protocol
  
• Policy match is a based on application
  
• Onboard SSL decryption capability is used
  

Which design objective could be satisfied by vsys functionality?

• Separation of routing tables used by different departments in company
  
• Provide same-device high availability functionality for different departments in a company
  
• Administrative separation of firewall policies used by different departments in company
  
• Allocate firewall hardware resources to different departments in a company
  

Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two)

• Monitor Tab
  
• Network Tab
  
• Device Tab
  
• Objects Tab
  
• Policies Tab
  

DNS sinkholing helps identify infected hosts on the protected network using DNS traffic in situations where the firewall cannot see the infected client's DNS query (that is, the firewall cannot see the originator of DNS query)Which of the following Statements is true?

• DNS Sinkholing requires the Vulnerability Protection Profile be enabled.
  
• Sinkholing malware DNS queries solves this visibilty problem by forging responses to the client host queries directed at fake domains created in a controlled 'Fake Internet' called Zanadu which designed for testing and honeypots.
  
• Infected hosts can then be easily identified in the traffic logs because any host that attempts to connect the sinkhole IP address are most likely infected with malware.
  
• DNS Sinkholing requires a license SinkHole license in order to activate.
  

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

• Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance
  
• Palo Alto Networks AutoFocus generated Correlation Objects
  
• Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles
  
• WF-500 configured as private clouds for privacy concerns
  
• Palo Alto Networks non-firewall products, like Traps and Aperture
  

What is the HA limitation specific to the PA-200 appliance?

• Can be deployed in either an active/passive or active/active HA pair
  
• Can only synchronize configurations and does not support session synchronization
  
• Has a dedicated HA1 and HA2 ports, but no HA3
  
• Is the only Palo Alto Networks firewall that does not have any HA capabilities