Palo Alto Networks PSE-Platform Exam Practice Test Instant Access

Question 1

Which configuration creates the most comprehensive ''best-practice'' Anti Spyware profile to prevent command and Control traffic?

AClone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

BClone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

CEdit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

DEdit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

Answer : A

Question 2

What two advantages of the DNS Sinkholing feature? (Choose two)

AIt can be deployed independently of an Anti-Spyware Profile.

BIt is monitoring DNS requests passively for malware domains.

CIt can work upstream from the internal DNS server.

DIt is forging DNS replies to known malicious domains.

Answer : C, D

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing

Question 3

Which two features are found in a next-generation firewall but are absent in a legacy firewall product? (Choose two)

AIdentification of application is possible on any port

BTraffic is separated by zones

CTraffic control is based on IP, port, and protocol

DPolicy match is a based on application

EOnboard SSL decryption capability is used

Answer : A, D

Question 4

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

AStore updates on an intermediary server and point all the firewalls to it

BMonitor update announcements and manually push updates to firewalls

CUtilize dynamic updates with an aggressive update schedule

DRun a Perl script to regularly check for updates and alert when one in released

Answer : B

Question 5

Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two)

AMonitor Tab

BNetwork Tab

CDevice Tab

DObjects Tab

EPolicies Tab

Answer : B, C

https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web-interface/panorama-templates/template-stacks

Question 6

Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

AAllow

BDrop

CQuarantine

DRedirect

EAlert

FReset

Answer : A, B, E, F

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html

Question 7

A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types. The customer believes that someone has clicked an email that might have contained a malicious file type. The customer already uses a firewall with User-ID enabled.

Which feature must also be enabled to prevent these attacks?

AWildFire

BApp-ID

CCustom App-ID rules

DContent Filtering

Answer : A

Palo Alto Networks PSE-Platform PSE Platform Exam Practice Test