Palo Alto Networks PSE-SASE Exam Practice Test Instant Access

Question 1

Which statement describes the data loss prevention (DLP) add-on?

AIt prevents phishing attacks by controlling the sites to which users can submit valid corporate credentials.

BIt employs automated policy enforcement to allow trusted behavior with a new Device-ID policy construct.

CIt is a centrally delivered cloud service with unified detection policies that can be embedded in existing control points.

DIt enables data sharing with third-party tools such as security information and event management (SIEM) systems.

Answer : C

Question 2

Which connection method allows secure web gateway (SWG) access to internet-based SaaS applications using HTTP and HTTPS protocols?

AGlobalProtect

BBroker VM

Cexplicit proxy

Dsystem-wide proxy

Answer : A

Question 3

Cloud-delivered App-ID provides specific identification of which two applications? (Choose two.)

Aunknown-tcp

Bprivate

Cweb-browsing

Dcustom

Answer : A, C

Question 4

Which two actions take place after Prisma SD-WAN Instant-On Network (ION) devices have been deployed at a site? (Choose two.)

AThe devices continually sync the information from directories, whether they are on-premise, cloud-based, or hybrid.

BThe devices establish VPNs over private WAN circuits that share a common service provider.

CThe devices automatically establish a VPN to the data centers over every internet circuit.

DThe devices provide an abstraction layer between the Prisma SD-WAN controller and a particular cloud service.

Answer : A, D

Question 5

Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.

Which proxy should be used to decrypt this traffic?

ASCP Proxy

BSSL Inbound Proxy

CSSH Forward Proxy

DSSL Forward Proxy

Answer : B

Question 6

Which two point products are consolidated into the Prisma secure access service edge (SASE) platform? (Choose two.)

AAutonomous Digital Experience Management (ADEM)

Bfirewall as a service (FWaaS)

CThreat Intelligence Platform (TIP)

Dsecurity information and event management (SIEM)

Answer : A, B

Question 7

How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?

AIt provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.

BIt offers risk scoring, analytics, reporting, and Security policy rule authoring.

CIt provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.

DIt prevents credential theft by controlling sites to which users can submit their corporate credentials.

Answer : C

Palo Alto Networks PSE-SASE Palo Alto Networks Systems Engineer (PSE): SASE Associate Exam Practice Test