Free Palo Alto Networks Systems Engineer (PSE): SASE Associate Exam PSE-SASE Exam Practice Test

In which step of the Five-Step Methodology for implementing the Zero Trust model does inspection and logging of all traffic take place?

• Step 4: Create the Zero Trust policy
• Step 3: Architect a Zero Trust network
• Step 1: Define the protect surface
• Step 5: Monitor and maintain the network

What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?

• Users, devices, and apps are identified no matter where they connect from.
• Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.
• Complexity of connecting to a gateway is increased, providing additional protection.
• Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.

What are three ways the secure access service edge (SASE) model can help an organization? (Choose three.)

• cost savings
• data protection
• increased licensing requirements
• increased performance
• decreased reliance on best practices

How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?

• Users are mapped via server logs for login events and syslog messages from authenticating services.
• It uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.
• It prompts the browser to present a valid client certificate to authenticate the user.
• Users access the SWG, which then connects the user to the website while still performing security measures.

What happens when SaaS Security sees a new or unknown SaaS application?

• It forwards the application for WildFire analysis.
• It uses machine learning (ML) to classify the application.
• It generates alerts regarding changes in performance.
• It extends the branch perimeter to the closest node with high performance.

What is an advantage of the unified approach of the Palo Alto Networks secure access service edge (SASE) platform over the use of multiple point products?

• It allows for automation of ticketing tasks and management of tickets without pivoting between various consoles.
• It scans all traffic, ports, and protocols and automatically discovers new apps.
• It turns threat intelligence and external attack surface data into an intelligent data foundation to dramatically accelerate threat response.
• It reduces network and security complexity while increasing organizational agility.

Which App Response Time metric measures the amount of time it takes to transfer incoming data from an external server to a local client?

• UDP Response Time (UDP-TRT)
• Server Response Time (SRT)
• Network Transfer Time (NTTn)
• Round Trip Time (RTT)

How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?

• It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.
• It offers risk scoring, analytics, reporting, and Security policy rule authoring.
• It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.
• It prevents credential theft by controlling sites to which users can submit their corporate credentials.

Which two prerequisites must an environment meet to onboard Prisma Access mobile users? (Choose two.)

• Zoning must be configured to require a user ID for the mobile users trust zone.
• Mapping of trust and untrust zones must be configured.
• BGP must be configured so that service connection networks can be advertised to the mobile gateways.
• Mobile user subnet and DNS portal name must be configured.

Which two services are provided by Prisma Access Insights? (Choose two.)

• summary overview screen of the health and performance of an organization's entire Prisma Access environment
• configuration of the on-premises firewall located behind the service-connection termination
• detection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise's data
• multiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure