Free Palo Alto Networks System Engineer – Strata Exam PSE-Strata Exam Practice Test

Which three of the following actions must be taken to enable Credential Phishing Prevention? (Choose three.)

• Enable User Credential Detection
• Enable User-ID
• Define a Secure Sockets Layer (SSL) decryption rule base
• Enable App-ID
• Define a uniform resource locator (URL) Filtering profile

Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)

• FTP
• HTTPS
• RTP
• HTTP

in which step of the Palo Alto Networks Five-Step Zero Trust Methodology would an organization's critical data, applications, assets, and services (DAAS) be identified?

• Step 4. Create the Zero Trust policy.
• Step 2: Map the transaction flows.
• Step 3. Architect a Zero Trust network.
• Step 1: Define the protect surface

A Fortune 500 customer has expressed interest in purchasing WildFire; however, they do not want to send discovered malware outside of their network.Which version of WildFire will meet this customer's requirements?

• WildFire Private Cloud
• WildFire Government Cloud
• WildFire Secure Cloud
• WildFire Public Cloud

Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

• Identified vulnerability exploits
• Launch of an identified malware executable file
• Endpoints access files from a removable drive
• Suspicious host behavior

Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)

• Network Tab
• Policies Tab
• Device Tab
• Objects Tab

A company has deployed the following* VM-300 firewalls in AWS* endpoint protection with the Traps Management Service* a Panorama M-200 for managing its VM-Series firewalls* PA-5220s for its internet perimeter,* Prisma SaaS for SaaS security.Which two products can send logs to the Cortex Data Lake? (Choose two).

• Prisma SaaS
• Traps Management Service
• VM-300 firewalls
• Panorama M-200 appliance

A customer requires protections and verdicts for portable executable (PE) and executable and linkable format (ELF), as well as the ability to integrate with existing security tools.Which Cloud-Delivered Security Service (CDSS) does Palo Alto Networks provide that will address this requirement?

• Dynamic Unpacking
• WildFire
• DNS Security
• File Blocking profile

For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a singleDatacenter? (Choose two.)

• Network segments in the Datacenter need to be advertised to only one Service Connection
• The customer edge device needs to support policy-based routing with symmetric return functionality
• The resources in the Datacenter will only be able to reach remote network resources that share the same region
• A maximum of four service connections per Datacenter are supported with this topology

An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP addressWhich mechanism prevents this connection from succeeding?

• DNS Sinkholing
• DNS Proxy
• Anti-Spyware Signatures
• Wildfire Analysis