2022 New Training Course PSE-Strata-Associate Tutorial Preparation Guide [Q14-Q29]

Posted byadminDecember 25, 2022Leave a Comment on 2022 New Training Course PSE-Strata-Associate Tutorial Preparation Guide [Q14-Q29]

Rate this post

2022 New Training Course PSE-Strata-Associate Tutorial Preparation Guide

Dumps of PSE-Strata-Associate Cover all the requirements of the Real Exam

NO.14 In which two of the following scenarios is personal data excluded from protection under the General Data Protection Regulation (GDPR)?
Select 2 Correct Responses

The data was automated as part of an information filing system.

The data was generated in the course of a purely personal or household activity.

The data will be used for the prevention of criminal offenses.

The data is related to a person’s economic or cultural identity.

NO.15 An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.
Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses

Layer 3

TAP mode

Virtual Wire

Layer 2

Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzkCAC
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/hamodes#id15a9d29

NO.16 Which feature allows a customer to gain visibility and respond to changes in user behavior or potential threats without manual policy changes?

User-ID agent

dynamic user groups (DUGs)

Lightweight Directory Access Protocol (LDAP) sync

dynamic address objects

NO.17 Which of the following is an advantage of the Palo Alto Networks Next-Generation Firewall (NGFW)?

Docker containers can be run on the hardware to add features.

It identifies applications by port number and protocol.

It is well positioned in the network to do more than provide access control.

Customers can create their own mix of security vendor products.

NO.18 A firewall enabled as a decryption broker will take which of the following actions?

forward clear text traffic to security chains for additional enforcement

monitor the state of active connections to determine which network packets to allow through

correlate a series of related threat events that indicate a likely compromised host on the network

identify potential denial-of-service (DoS) attacks and take protective action

NO.19 Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

multi-pass

multiple-core threaded

single-pass

no-pass

NO.20 The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and received from this website.
Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?

Forward Proxy

Web Proxy

Certificate Proxy

Inbound Proxy

NO.21 Which section of a Security Lifecycle Review (SLR) report summarizes risk exposure by breaking down a detected attack on the network?

Advanced URL Filtering Analysis

SaaS Applications

Threats at a Glance

Applications that Introduce Risk

NO.22 A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.
How will the performance of the firewall be affected if the customer also enables both WildFire and User-ID?

The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.

Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.

There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.

Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.

NO.23 A Human Resources (HR) application has the URL of https://hr.company.com:4433/.
How should the “Service” column of the Security policy be set to match and permit this application?

Define and then select a new custom Transmission Control Protocol (TCP) service with port 4433.

Edit “service-https” to use port 4433.

Set to “service-http”.

Set to “application-defaults,” which will locate and match the HR application.

NO.24 Which path will generate a stats dump file on a Palo Alto Networks Next-Generation Firewall (NGFW)?

Device > Support > Generate Statsdump

Device > Statsdump > Generate Statsdump

Device > SLR > Generate Statsdump

Device > Files > Generate Statsdump

NO.25 The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?

LLDP profiles

security zones

DHCP groups

security profile groups

NO.26 Which Next-Generation Firewall (NGFW) deployment model allows an organization to monitor traffic during evaluations without interruption to network traffic?

Layer 2

TAP mode

virtual wire

Layer 3

NO.27 Using a comprehensive range of natively-integrated subscriptions and inline machine learning (ML), what does a Next-Generation Firewall (NGFW) use to prevent known and unknown threats in real time?

Cloud Native Security Platform (CNSP)

Cloud Security Posture Management (CSPM)

Cloud Identity Access Management (CIAM)

Cloud Delivered Security Services (CDSS)

Loading …