Palo Alto Networks PSE-Platform Exam Practice Test Instant Access

Question 1

Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

AAllow

BDrop

CQuarantine

DRedirect

EAlert

FReset

Answer : A, B, E, F

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html

Question 2

Which three application options can be selected in the security policy rule? (Choose three.)

AApplication Group

BIndividual Application

CApplication Risk

DApplication Filter

EApplication Category

Answer : A, B, D

Question 3

Which two components must to be configured within User-ID on a new firewall that has been implemented? (Choose two.)

AGroup Mapping

B802.1X Authentication

CProxy Authentication

DUser mapping

Answer : A, D

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id

Question 4

A customer is worried about unknown attacks, but due to privacy and regulatory issues, won't implement SSL decrypt.

How can the platform still address this customer's concern?

AIt pivots the conversation to Traps on the endpoint preventing unknown exploits and malware there instead.

BIt bypasses the need to decrypt SSL Traffic by analyzing the file while still encrypted.

CIt shows how AutoFocus can provide visibility into targeted attacks at the industry sector.

DIt overcomes reservations about SSL decrypt by offloading to a higher capacity firewall to help with the decrypt throughput.

Answer : A

Question 5

Which certificate can be used to ensure that traffic coming from a specific server remains encrypted?

AForward entrust

BSSL exclude certificate

CForward trust

DSSL inbound inspection

Answer : B

https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/device/device-certificate-management-ssl-decryption-exclusion

Question 6

Which two designs require virtual systems? (Choose two.)

AA shared gateway interface that does not need a full administrative boundary

BA virtual router as a replacement for an internet-facing router

CA single physical firewall shared by different organizations, each with unique traffic control needs

DA VMware NSX deployment that needs micros segmentation

Answer : B, C

Question 7

Which three network events are highlighted through correlation objects as a potential security risks? (Choose three.)

AIdentified vulnerability exploits

BSuspicious traffic patterns

CKnown command-and-control activity

DLaunch of an identified malware executable file

EEndpoints access files from a removable drive

Answer : A, B, C

Palo Alto Networks PSE-Platform PSE Platform Exam Practice Test