Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PSE Strata

Palo Alto Networks PSE Strata Exam Questions
Palo Alto Networks System Engineer - Strata (Page 2 )

Updated On: 16-Feb-2026
Page 2 of 29
PDF with 139 Questions

What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)

  1. Next-generation firewalls deployed with WildFire Analysis Security Profiles
  2. WF-500 configured as private clouds for privacy concerns
  3. Correlation Objects generated by AutoFocus
  4. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
  5. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS

Answer(s): C,D,E

Explanation:

https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus



What are two core values of the Palo Alto Network Security Operating Platform? (Choose two.}

  1. prevention of cyber attacks
  2. safe enablement of all applications
  3. threat remediation
  4. defense against threats with static security solution

Answer(s): A,C



What are two advantages of the DNS Sinkholing feature? (Choose two.)

  1. It forges DNS replies to known malicious domains.
  2. It monitors DNS requests passively for malware domains.
  3. It can be deployed independently of an Anti-Spyware Profile.
  4. It can work upstream from the internal DNS server.

Answer(s): A,D

Explanation:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns- sinkholing



Which two products can send logs to the Cortex Data Lake? (Choose two.)

  1. AutoFocus
  2. PA-3260 firewall
  3. Prisma Access
  4. Prisma Public Cloud

Answer(s): B,C

Explanation:

https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get- started-with-cortex-data-lake/forward-logs-to-cortex-data-lake



Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

  1. User Mapping
  2. Proxy Authentication
  3. Group Mapping
  4. 802.1X Authentication

Answer(s): A,C

Explanation:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id






Post your Comments and Discuss Palo Alto Networks PSE Strata exam dumps with other Community members:

Join the PSE Strata Discussion