Free PSE-Strata Exam Braindumps (page: 9)

Page 8 of 36

A client chooses to not block uncategorized websites.
Which two additions should be made to help provide some protection? (Choose two.)

  1. A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access
  2. A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites
  3. A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads
  4. A security policy rule using only known URL categories with the action set to allow

Answer(s): A,B



A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types.
The customer uses a firewall with User-ID enabled
Which feature must also be enabled to prevent these attacks?

  1. Content Filtering
  2. WildFire
  3. Custom App-ID rules
  4. App-ID

Answer(s): B



Decryption port mirroring is now supported on which platform?

  1. all hardware-based and VM-Series firewalls with the exception of VMware NSX. Citrix SDX, or public cloud hypervisors
  2. in hardware only
  3. only one the PA-5000 Series and higher
  4. all hardware-based and VM-Series firewalls regardless of where installed

Answer(s): D



Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

  1. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
  2. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS-PRA-25. 1x PAN-PRA-25
  3. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25
  4. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR

Answer(s): C






Post your Comments and Discuss Palo Alto Networks PSE-Strata exam with other Community members:

PSE-Strata Discussions & Posts