Online Access Free PSE-Strata-Pro-24 Practice Test

While responding to a customer RFP, a systems engineer (SE) is presented the question, "How do PANW firewalls enable the mapping of transactions as part of Zero Trust principles?" Which two narratives can the SE use to respond to the question? (Choose two.)

• A.Describe how Palo Alto Networks NGFW Security policies are built by using users, applications, and data objects.
• B.Explain how the NGFW can be placed in the network so it has visibility into every traffic flow.
• C.Emphasize Zero Trust as an ideology, and that the customer decides how to align to Zero Trust principles.
• D.Reinforce the importance of decryption and security protections to verify traffic that is not malicious.

Device-ID can be used in which three policies? (Choose three.)

• A.Security
• B.SD-WAN
• C.Policy-based forwarding (PBF)
• D.Decryption
• E.Quality of Service (QoS)

A systems engineer (SE) is working with a customer that is fully cloud-deployed for all applications. The customer is interested in Palo Alto Networks NGFWs but describes the following challenges:
"Our apps are in AWS and Azure, with whom we have contracts and minimum-revenue guarantees. We would use the built-in firewall on the cloud service providers (CSPs), but the need for centralized policy management to reduce human error is more important." Which recommendations should the SE make?

• A.Cloud NGFWs in AWS and VM-Series firewall in Azure; the customer selects a PAYG licensing Panorama deployment in their CSP of choice.
• B.VM-Series firewall and CN-Series firewall in both CSPs; provide the customer a private-offer Panorama virtual appliance from their CSP's marketplace of choice to centrally manage the systems.
• C.Cloud NGFWs at both CSPs; provide the customer a license for a Panorama virtual appliance from their CSP's marketplace of choice to centrally manage the systems.
• D.VM-Series firewalls in both CSPs; manually built Panorama in the CSP of choice on a host of either type: Palo Alto Networks provides a license.

Which use case is valid for Palo Alto Networks Next-Generation Firewalls (NGFWs)?

• A.PAN-OS GlobalProtect gateways allow companies to run malware and exploit prevention modules on their endpoints without installing endpoint agents.
• B.IT/OT segmentation firewalls allow operational technology resources in plant networks to securely interface with IT resources in the corporate network.
• C.Serverless NGFW code security provides public cloud security for code-only deployments that do not leverage virtual machine (VM) instances or containerized services.
• D.Code-embedded NGFWs provide enhanced internet of things (IoT) security by allowing PAN-OS code to be run on devices that do not support embedded virtual machine (VM) images.

When a customer needs to understand how Palo Alto Networks NGFWs lower the risk of exploitation by newly announced vulnerabilities known to be actively attacked, which solution and functionality delivers the most value?

• A.WildFire loads custom OS images to ensure that the sandboxing catches any activity that would affect the customer's environment.
• B.Advanced Threat Prevention's command injection and SQL injection functions use inline deep learning against zero-day threats.
• C.Single Pass Architecture and parallel processing ensure traffic is efficiently scanned against any enabled Cloud-Delivered Security Services (CDSS) subscription.
• D.Advanced URL Filtering uses machine learning (ML) to learn which malicious URLs are being utilized by the attackers, then block the resulting traffic.