Palo Alto Networks PSE-Platform Exam Practice Test Instant Access

Question 1

Which certificate can be used to ensure that traffic coming from a specific server remains encrypted?

AForward entrust

BSSL exclude certificate

CForward trust

DSSL inbound inspection

Answer : B

https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/device/device-certificate-management-ssl-decryption-exclusion

Question 2

Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

ACreate an anti-spyware profile to block all spyware

BCreate a vulnerability protection profile to block all the vulnerabilities with severity low and higher

CCreate an SSL Decryption policy to decrypt 100% of the traffic

DCreate an antivirus profile to block all content that matches and antivirus signature

ECreate a WildFire profile to schedule file uploads during low network usage windows

Answer : B, C, E

Question 3

When a customer creates a new SLR report, what is the first step in generating a proper SLR report once logged in to the Partner Portal?

AClick the Track my deals button to view your open Opportunities.

BScroll down and click the New Security Lifecycle Review button.

CClick the Select files... button and find the relevant statsdump file on your local machine and click Upload.

DSelect the appropriate Opportunity.

Answer : A

Question 4

Which three actions should be taken before deploying a firewall evaluation unit in the customer's environment? (Choose three.)

AInform the customer that they will need to provide a SPAN port for the evaluation unit assuming a TAP mode deployment.

BRequest that the customs make port 3978 available to allow the evaluation unit to communicate with Panorama.

CReset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed.

DUpgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.

ESet expectations around which information will be presented in the Security Lifecycle Review because sensitive information may be made visible.

Answer : A, C, D

Question 5

What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)

AIt should be used to create pipeline and customer interest.

BIt should be used to demonstrate the power of the platform.

CThe lab documentation should be reviewed and tested.

DIt should be led by Palo Alto Network employees.

EThe required equipment should be shipped to lab site in advance.

Answer : A, B, C

Question 6

How does SSL Forward Proxy decryption work?

ASSL Forward Proxy decryption policy decrypts and inspects SSL/TLS traffic from internal users to the web.

BThe SSL Forward Proxy Firewall creates a certificate intended for the client that is intercepted and altered by the firewall.

CIf the server's certificate is signed by a CA that the firewall does not trust, the firewall will use the certificate only on Forward Trust.

DThe firewall resides between the internal client and internal server to intercept traffic between the two.

Answer : A

Question 7

Which three network events are highlighted through correlation objects as a potential security risks? (Choose three.)

AIdentified vulnerability exploits

BSuspicious traffic patterns

CKnown command-and-control activity

DLaunch of an identified malware executable file

EEndpoints access files from a removable drive

Answer : A, B, C

Palo Alto Networks PSE Platform Exam Practice Test