Palo Alto Networks PSE-SASE Exam Practice Test Instant Access

Question 1

In which step of the Five-Step Methodology for implementing the Zero Trust model does inspection and logging of all traffic take place?

AStep 4: Create the Zero Trust policy

BStep 3: Architect a Zero Trust network

CStep 1: Define the protect surface

DStep 5: Monitor and maintain the network

Answer : D

Question 2

Which connection method allows secure web gateway (SWG) access to internet-based SaaS applications using HTTP and HTTPS protocols?

AGlobalProtect

BBroker VM

Cexplicit proxy

Dsystem-wide proxy

Answer : A

Question 3

Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)

Aunknown-tcp

Bprivate

Cweb-browsing

Dcustom

Answer : A, C

Question 4

Which two actions take place after Prisma SD-WAN Instant-On Network (ION) devices have been deployed at a site? (Choose two.)

AThe devices continually sync the information from directories, whether they are on-premise, cloud-based, or hybrid.

BThe devices establish VPNs over private WAN circuits that share a common service provider.

CThe devices automatically establish a VPN to the data centers over every internet circuit.

DThe devices provide an abstraction layer between the Prisma SD-WAN controller and a particular cloud service.

Answer : A, D

Question 5

Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.

Which proxy should be used to decrypt this traffic?

ASCP Proxy

BSSL Inbound Proxy

CSSH Forward Proxy

DSSL Forward Proxy

Answer : B

Question 6

How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?

AEnable syslog on the Instant-On Network (ION) device.

BUse a zone-based firewall to export directly through application program interface (API) to the SIEM.

CEnable Simple Network Management Protocol (SNMP) on the Instant-On Network (ION) device.

DUse the centralized flow data-export tool built into the controller.

Answer : A

Question 7

What can prevent users from unknowingly downloading potentially malicious file types from the internet?

AApply a File Blocking profile to Security policy rules that allow general web access.

BApply a Zone Protection profile to the untrust zone.

CAssign an Antivirus profile to Security policy rules that deny general web access.

DAssign a Vulnerability profile to Security policy rules that deny general web access.

Answer : A

Palo Alto Networks PSE-SASE Palo Alto Networks Systems Engineer (PSE): SASE Associate Exam Practice Test