PSE-Strata-Pro-24 Free Practice Test

What does Policy Optimizer allow a systems engineer to do for an NGFW?

1. A. Recommend best practices on new policy creation
2. B. Show unused licenses for Cloud-Delivered Security Services (CDSS) subscriptions and firewalls
3. C. Identify Security policy rules with unused applications
4. D. Act as a migration tool to import policies from third-party vendors

Correct Answer: C

What are three valid Panorama deployment options? (Choose three.)

1. A. As a virtual machine (ESXi, Hyper-V, KVM)
2. B. With a cloud service provider (AWS, Azure, GCP)
3. C. As a container (Docker, Kubernetes, OpenShift)
4. D. On a Raspberry Pi (Model 4, Model 400, Model 5)
5. E. As a dedicated hardware appliance (M-100, M-200, M-500, M-600)

Correct Answer: ABE

There are no Advanced Threat Prevention log events in a company's SIEM instance. However, the systems administrator has confirmed that the Advanced Threat Prevention subscription is licensed and that threat events are visible in the threat logs on the firewall.
Which action should the systems administrator take next?

1. A. Enable the company's Threat Prevention license.
2. B. Check with the SIEM vendor to verify that Advanced Threat Prevention logs are reaching the company's SIEM instance.
3. C. Have the SIEM vendor troubleshoot its software.
4. D. Ensure the Security policy rules that use Advanced Threat Prevention are set for log forwarding to the correct SIEM.

Correct Answer: D

A customer asks a systems engineer (SE) how Palo Alto Networks can claim it does not lose throughput performance as more Cloud-Delivered Security Services (CDSS) subscriptions are enabled on the firewall.
Which two concepts should the SE explain to address the customer's concern? (Choose two.)

1. A. Parallel Processing
2. B. Advanced Routing Engine
3. C. Single Pass Architecture
4. D. Management Data Plane Separation

Correct Answer: AC

A current NGFW customer has asked a systems engineer (SE) for a way to prove to their internal management team that its NGFW follows Zero Trust principles. Which action should the SE take?

1. A. Use the "Monitor > PDF Reports" node to schedule a weekly email of the Zero Trust report to the internal management team.
2. B. Help the customer build reports that align to their Zero Trust plan in the "Monitor > Manage Custom Reports" tab.
3. C. Use a third-party tool to pull the NGFW Zero Trust logs, and create a report that meets the customer's needs.
4. D. Use the "ACC" tab to help the customer build dashboards that highlight the historical tracking of the NGFW enforcing policies.

Correct Answer: B