Palo Alto Networks PSE-SASE Exam Practice Test Instant Access

Question 1

What happens when SaaS Security sees a new or unknown SaaS application?

AIt forwards the application for WildFire analysis.

BIt uses machine learning (ML) to classify the application.

CIt generates alerts regarding changes in performance.

DIt extends the branch perimeter to the closest node with high performance.

Answer : A

Question 2

Which two services are provided by Prisma Access Insights? (Choose two.)

Asummary overview screen of the health and performance of an organization's entire Prisma Access environment

Bconfiguration of the on-premises firewall located behind the service-connection termination

Cdetection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise's data

Dmultiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure

Answer : A, D

Question 3

How does the Palo Alto Networks secure access service edge (SASE) solution enable Zero Trust in a customer environment?

AIt stops attacks that use DNS for command and control or data theft.

BIt feeds threat intelligence into an automation engine for rapid and consistent protections.

CIt classifies sites based on content, features, and safety.

DIt continuously validates every stage of a digital interaction.

Answer : D

Question 4

Which two services are part of the Palo Alto Networks cloud-delivered security services (CDSS) package? (Choose two.)

Avirtual desktop infrastructure (VDI)

BInternet of Things (IoT) Security

CAdvanced URL Filtering (AURLF)

Dsecurity information and event management (SIEM)

Answer : B, C

Question 5

How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?

AUsers are mapped via server logs for login events and syslog messages from authenticating services.

BIt uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.

CIt prompts the browser to present a valid client certificate to authenticate the user.

DUsers access the SWG, which then connects the user to the website while still performing security measures.

Answer : D

Question 6

What are two ways service connections and remote network connections differ? (Choose two.)

ARemote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.

BRemote network connections enforce security policies, but service connections do not.

CAn on-premises resource cannot originate a connection to the internet over a service connection.

DService connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.

Answer : A

Question 7

How does Autonomous Digital Experience Management (ADEM) improve user experience?

AThe root cause of any alert can be viewed with a single click, allowing users to swiftly stop attacks across the environment.

BThe virtual appliance receives and stores firewall logs without using a local Log Collector, simplifying required steps users must take.

CWorking from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.

DIt applies in-depth hunting and forensics knowledge to identify and contain threats before they become a breach.

Answer : C

Palo Alto Networks Systems Engineer (PSE): SASE Associate Exam Practice Test