Palo Alto Networks PSE-Platform Exam Practice Test Instant Access

Question 1

Which two designs require virtual systems? (Choose two.)

AA shared gateway interface that does not need a full administrative boundary

BA virtual router as a replacement for an internet-facing router

CA single physical firewall shared by different organizations, each with unique traffic control needs

DA VMware NSX deployment that needs micros segmentation

Answer : B, C

Question 2

A client chooses to not block uncategorized websites.

Which two additions should be made to help provide some protection? (Choose two.)

AA security policy rule using only known URL categories with the action set to allow

BA file blocking profile to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

CA URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

DA data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

Answer : A, C

Question 3

What are three considerations when deploying User-ID. (Choose three.)

AEnable WMI probing in high security networks

BUser-ID can support a maximum of 15 hops.

CSpecify included and excluded networks when configuring User-ID

DUse a dedicated service account for User-ID services with the minimal permissions necessary.

EOnly enable User-ID on trusted zones

Answer : A, C, D

Question 4

A customer is adopting Microsoft Office 365 but is concerned about the potential security exposure that such a move could mean. The security analyst suggests using Aperture and the Palo Alto Network firewall together to provide data and network security.

What are the two reasons this solution has been suggested? (Choose two.)

AThe firewall secures data in transit between the network and the cloud.

BAperture prevents users from using non-sanctioned SaaS applications.

CThe firewall scans data that resides in the cloud for malware.

DAperture scans data that resides in the cloud for sensitive information.

Answer : A, B

Question 5

Which three policies or certificates must be configured for SSL Forward Proxy decryption? (Choose three.)

AForward trust certificate

BForward untrust certificate

CA decrypt port mirror policy

DInternal server certificate

EA decryption policy

Answer : A, B, E

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/decryption/keys-and-certificates-for-decryption-policies#_40372

Question 6

What are the three benefits of the Palo Alto Networks migration tool? (Choose three.)

AConversion of existing firewall policies to Palo Alto Networks NGFW policies

BAnalysis of existing firewall environment

CAssistance with the transition from POC to Production

DElimination of the need for consulting/professional services

EThe migration tool provides App-ID enhancements to improve Technical Support calls

Answer : A, B, C

Question 7

What is the HA limitation specific to the PA-200 appliance?

ACan be deployed in either an active/passive or active/active HA pair

BCan only synchronize configurations and does not support session synchronization

CHas a dedicated HA1 and HA2 ports, but no HA3

DIs the only Palo Alto Networks firewall that does not have any HA capabilities

Answer : B

Palo Alto Networks PSE Platform Exam Practice Test