PSE-Strata-Pro-24 Free Practice Test

Which statement appropriately describes performance tuning Intrusion Prevention System (IPS) functions on a Palo Alto Networks NGFW running Advanced Threat Prevention?

1. A. Leave all signatures turned on because they do not impact performance.
2. B. Create a new threat profile to use only signatures needed for the environment.
3. C. Work with TAC to run a debug and receive exact measurements of performance utilization for the IPS.
4. D. To increase performance, disable any threat signatures that do not apply to the environment.

Correct Answer: B

Regarding APIs, a customer RFP states: "The vendor??s firewall solution must provide an API with an enforcement mechanism to deactivate API keys after two hours." How should the response address this clause?

1. A. Yes - This is the default setting for API keys.
2. B. No - The PAN-OS XML API does not support keys.
3. C. No - The API keys can be made, but there is no method to deactivate them based on time.
4. D. Yes - The default setting must be changed from no limit to 120 minutes.

Correct Answer: D

A customer has acquired 10 new branch offices, each with fewer than 50 users and no existing firewall. The systems engineer wants to recommend a PA-Series NGFW with Advanced Threat Prevention at each branch location. Which NGFW series is the most cost-efficient at securing internet traffic?

1. A. PA-200
2. B. PA-400
3. C. PA-500
4. D. PA-600

Correct Answer: B

What are the first two steps a customer should perform as they begin to understand and adopt Zero Trust principles? (Choose two)

1. A. Understand which users, devices, infrastructure, applications, data, and services are part of the network or have access to it.
2. B. Enable relevant Cloud-Delivered Security Services (CDSS) subscriptions to automatically protect the customer's environment from both internal and external threats.
3. C. Map the transactions between users, applications, and data, then verify and inspect those transactions.
4. D. Implement VM-Series NGFWs in the customer??s public and private clouds to protect east-west traffic.

Correct Answer: AC

A prospective customer is interested in Palo Alto Networks NGFWs and wants to evaluate the ability to segregate its internal network into unique BGP environments.
Which statement describes the ability of NGFWs to address this need?

1. A. It cannot be addressed because PAN-OS does not support it.
2. B. It can be addressed by creating multiple eBGP autonomous systems.
3. C. It can be addressed with BGP confederations.
4. D. It cannot be addressed because BGP must be fully meshed internally to work.

Correct Answer: C