Free Palo Alto Networks Systems Engineer (PSE): SASE Associate Exam PSE-SASE Exam Practice Test

The Cortex Data Lake sizing calculator for Prisma Access requires which three values as inputs? (Choose three.)

• throughput of remote networks purchased
• cloud-managed or Panorama-managed deployment
• retention period for the logs to be stored
• number of log-forwarding destinations
• number of mobile users purchased

Which two point products are consolidated into the Prisma secure access service edge (SASE) platform? (Choose two.)

• Autonomous Digital Experience Management (ADEM)
• firewall as a service (FWaaS)
• Threat Intelligence Platform (TIP)
• security information and event management (SIEM)

Which statement describes the data loss prevention (DLP) add-on?

• It prevents phishing attacks by controlling the sites to which users can submit valid corporate credentials.
• It employs automated policy enforcement to allow trusted behavior with a new Device-ID policy construct.
• It is a centrally delivered cloud service with unified detection policies that can be embedded in existing control points.
• It enables data sharing with third-party tools such as security information and event management (SIEM) systems.

Which product allows advanced Layer 7 inspection, access control, threat detection and prevention?

• Infrastructure as a Service (IaaS)
• remote browser isolation
• network sandbox
• Firewall as a Service (FWaaS)

Which product leverages GlobalProtect agents for endpoint visibility and native Prisma SD-WAN integration for remote sites and branches?

• Cloud-Delivered Security Services (CDSS)
• WildFire
• CloudBlades:
• Autonomous Digital Experience Management (ADEM)

How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?

• It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.
• It offers risk scoring, analytics, reporting, and Security policy rule authoring.
• It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.
• It prevents credential theft by controlling sites to which users can submit their corporate credentials.

In which step of the Five-Step Methodology for implementing the Zero Trust model are the services most valuable to the company defined?

• Step 2: Map the transaction flows
• Step 4: Create the Zero Trust policy
• Step 5: Monitor and maintain the network
• Step 1: Define the protect surface

Which component of the secure access service edge (SASE) solution provides complete session protection, regardless of whether a user is on or off the corporate network?

• Zero Trust
• threat prevention
• single-pass architecture (SPA)
• DNS Security

What are two ways service connections and remote network connections differ? (Choose two.)

• Remote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.
• Remote network connections enforce security policies, but service connections do not.
• An on-premises resource cannot originate a connection to the internet over a service connection.
• Service connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.

What is a benefit of the Palo Alto Networks secure access service edge (SASE) solution's ability to provide insight into SD-WAN and network security metrics while highlighting critical issues across all managed tenants?

• It rearchitects the way signatures are delivered, performing updates and streaming them to the firewall within seconds after the analysis is done.
• It helps protect inbound, outbound, and east-west traffic between container workload types in Kubernetes environments without slowing development speed.
• It simplifies workflows and instantly automates common use cases with hundreds of prebuilt playbooks.
• It helps managed service providers (MSPs) accelerate troubleshooting and meet service level agreements (SLAs) for all their customers.