Palo Alto Networks PSE-SASE Exam Practice Test Instant Access

Question 1

What happens when SaaS Security sees a new or unknown SaaS application?

AIt forwards the application for WildFire analysis.

BIt uses machine learning (ML) to classify the application.

CIt generates alerts regarding changes in performance.

DIt extends the branch perimeter to the closest node with high performance.

Answer : A

Question 2

Which two services are provided by Prisma Access Insights? (Choose two.)

Asummary overview screen of the health and performance of an organization's entire Prisma Access environment

Bconfiguration of the on-premises firewall located behind the service-connection termination

Cdetection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise's data

Dmultiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure

Answer : A, D

Question 3

How does the Palo Alto Networks secure access service edge (SASE) solution enable Zero Trust in a customer environment?

AIt stops attacks that use DNS for command and control or data theft.

BIt feeds threat intelligence into an automation engine for rapid and consistent protections.

CIt classifies sites based on content, features, and safety.

DIt continuously validates every stage of a digital interaction.

Answer : D

Question 4

Which two services are part of the Palo Alto Networks cloud-delivered security services (CDSS) package? (Choose two.)

Avirtual desktop infrastructure (VDI)

BInternet of Things (IoT) Security

CAdvanced URL Filtering (AURLF)

Dsecurity information and event management (SIEM)

Answer : B, C

Question 5

How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?

AUsers are mapped via server logs for login events and syslog messages from authenticating services.

BIt uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.

CIt prompts the browser to present a valid client certificate to authenticate the user.

DUsers access the SWG, which then connects the user to the website while still performing security measures.

Answer : D

Question 6

How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?

AEnable syslog on the Instant-On Network (ION) device.

BUse a zone-based firewall to export directly through application program interface (API) to the SIEM.

CEnable Simple Network Management Protocol (SNMP) on the Instant-On Network (ION) device.

DUse the centralized flow data-export tool built into the controller.

Answer : A

Question 7

What can prevent users from unknowingly downloading potentially malicious file types from the internet?

AApply a File Blocking profile to Security policy rules that allow general web access.

BApply a Zone Protection profile to the untrust zone.

CAssign an Antivirus profile to Security policy rules that deny general web access.

DAssign a Vulnerability profile to Security policy rules that deny general web access.

Answer : A

Palo Alto Networks PSE-SASE Palo Alto Networks Systems Engineer (PSE): SASE Associate Exam Practice Test