Free Palo Alto Networks Systems Engineer Professional – Hardware Firewall Exam PSE-Strata-Pro-24 Exam Practice Test

Which two actions can a systems engineer take to discover how Palo Alto Networks can bring value to a customer's business when they show interest in adopting Zero Trust? (Choose two.)

• Ask the customer about their internal business flows, such as how their users interact with applications and data across the infrastructure.
• Explain how Palo Alto Networks can place virtual NGFWs across the customer's network to ensure assets and traffic are seen and controlled.
• Use the Zero Trust Roadshow package to demonstrate to the customer how robust Palo Alto Networks capabilities are in meeting Zero Trust.
• Ask the customer about their approach to Zero Trust, explaining that it is a strategy more than it is something they purchase.

What are three valid Panorama deployment options? (Choose three.)

• As a virtual machine (ESXi, Hyper-V, KVM)
• With a cloud service provider (AWS, Azure, GCP)
• As a container (Docker, Kubernetes, OpenShift)
• On a Raspberry Pi (Model 4, Model 400, Model 5)
• As a dedicated hardware appliance (M-100, M-200, M-500, M-600)

In which two locations can a Best Practice Assessment (BPA) report be generated for review by a customer? (Choose two.)

• PANW Partner Portal
• Customer Support Portal
• AIOps
• Strata Cloud Manager (SCM)

Which three descriptions apply to a perimeter firewall? (Choose three.)

• Network layer protection for the outer edge of a network
• Power utilization less than 500 watts sustained
• Securing east-west traffic in a virtualized data center with flexible resource allocation
• Primarily securing north-south traffic entering and leaving the network
• Guarding against external attacks

A systems engineer (SE) is working with a customer that is fully cloud-deployed for all applications. The customer is interested in Palo Alto Networks NGFWs but describes the following challenges:"Our apps are in AWS and Azure, with whom we have contracts and minimum-revenue guarantees. We would use the built-in firewall on the cloud service providers (CSPs), but the need for centralized policy management to reduce human error is more important."Which recommendations should the SE make?

• Cloud NGFWs at both CSPs; provide the customer a license for a Panorama virtual appliance from their CSP's marketplace of choice to centrally manage the systems.
• Cloud NGFWs in AWS and VM-Series firewall in Azure; the customer selects a PAYG licensing Panorama deployment in their CSP of choice.
• VM-Series firewalls in both CSPs; manually built Panorama in the CSP of choice on a host of either type: Palo Alto Networks provides a license.
• VM-Series firewall and CN-Series firewall in both CSPs; provide the customer a private-offer
• Panorama virtual appliance from their CSP’s marketplace of choice to centrally manage the systems.

Which two compliance frameworks are included with the Premium version of Strata Cloud Manager (SCM)? (Choose two)

• Payment Card Industry (PCI)
• National Institute of Standards and Technology (NIST)
• Center for Internet Security (CIS)
• Health Insurance Portability and Accountability Act (HIPAA)

A prospective customer has provided specific requirements for an upcoming firewall purchase, including the need to process a minimum of 200,000 connections per second while maintaining at least 15 Gbps of throughput with App-ID and Threat Prevention enabled.What should a systems engineer do to determine the most suitable firewall for the customer?

• Upload 30 days of customer firewall traffic logs to the firewall calculator tool on the Palo Alto Networks support portal.
• Download the firewall sizing tool from the Palo Alto Networks support portal.
• Use the online product configurator tool provided on the Palo Alto Networks website.
• Use the product selector tool available on the Palo Alto Networks website.

When a customer needs to understand how Palo Alto Networks NGFWs lower the risk of exploitation by newly announced vulnerabilities known to be actively attacked, which solution and functionality delivers the most value?

• Advanced URL Filtering uses machine learning (ML) to learn which malicious URLs are being utilized by the attackers, then block the resulting traffic.
• Advanced Threat Prevention's command injection and SQL injection functions use inline deep learning against zero-day threats.
• Single Pass Architecture and parallel processing ensure traffic is efficiently scanned against any enabled Cloud-Delivered Security Services (CDSS) subscription.
• WildFire loads custom OS images to ensure that the sandboxing catches any activity that would affect the customer's environment.

Which three tools can a prospective customer use to evaluate Palo Alto Networks products to assess where they will fit in the existing architecture? (Choose three)

• Proof of Concept (POC)
• Policy Optimizer
• Security Lifecycle Review (SLR)
• Ultimate Test Drive
• Expedition

What are two methods that a NGFW uses to determine if submitted credentials are valid corporate credentials? (Choose two.)

• Group mapping
• LDAP query
• Domain credential filter
• WMI client probing