Online Access Free PSE-Strata-Associate Practice Test

Which Next-Generation Firewall (NGFW) deployment model allows an organization to monitor traffic during evaluations without interruption to network traffic?

• A.Layer 2
• B.Layer 3
• C.TAP mode
• D.virtual wire

Which subscription should be activated when a predefined, known malicious IP address is updated?

• A.URL Filtering
• B.Threat Prevention
• C.Cortex Data Lake
• D.WildFire

To use App-ID effectively in Security policies, which three best practices should be followed? (Choose three.) Select 3 Correct Responses

• A.Use Policy Optimizer to migrate to an application-based policy.
• B.Whenever possible, enable App-ID override.
• C.After the application is specified in policy, set the 7 service to "any".
• D.Use Expedition to migrate a port-based policy to PAN-OS.
• E.Use phased transition to safely enable applications.

The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and received from this website.
Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?

• A.Inbound Proxy
• B.Forward Proxy
• C.Web Proxy
• D.Certificate Proxy

Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

• A.single-pass
• B.no-pass
• C.multiple-core threaded
• D.multi-pass