Free Palo Alto Networks System Engineer – Strata Exam PSE-Strata Exam Practice Test

Access to a business site is blocked by URL Filtering inline machine learning (ML) andconsidered as a false-positive.How should the site be made available?

• Disable URL Filtering inline ML
• Create a custom URL category and add it to the Security policy
• Create a custom URL category and add it on exception of the inline ML profile
• Change the action of real-time detection category on URL filtering profile

In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two.)

• Dedicated Logger Mode is required
• Logs per second exceed 10,000
• Appliance needs to be moved into data center
• Device count is under 100

Which three of the following actions must be taken to enable Credential Phishing Prevention? (Choose three.)

• Enable User Credential Detection
• Enable User-ID
• Define a Secure Sockets Layer (SSL) decryption rule base
• Enable App-ID
• Define a uniform resource locator (URL) Filtering profile

Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

• M-200
• M-600
• M-100
• Panorama VM-Series

As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

• access key ID
• secret access key
• administrative Password
• AWS account ID

A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?

• File Blocking Profile
• DoS Protection Profile
• URL Filtering Profile
• Vulnerability Protection Profile

A customer requires protections and verdicts for portable executable (PE) and executable and linkable format (ELF), as well as the ability to integrate with existing security tools.Which Cloud-Delivered Security Service (CDSS) does Palo Alto Networks provide that will address this requirement?

• Dynamic Unpacking
• WildFire
• DNS Security
• File Blocking profile

Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

• it requires the Vulnerability Protection profile to be enabled
• DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates
• infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs
• It requires a Sinkhole license in order to activate

What are two presales selling advantages of using Expedition? (Choose two.)

• map migration gaps to professional services statement of Works (SOWs)
• streamline & migrate to Layer7 policies using Policy Optimizer
• reduce effort to implement policies based on App-ID and User-ID
• easy migration process to move to Palo Alto Networks NGFWs

What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

• operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)
• improved revenue due to more efficient network traffic throughput
• Increased security due to scalable cloud delivered security Services (CDSS)
• Cost savings due to reduction in IT management effort and device