Palo Alto PSE Strata Exam Questions
with Answers
What are two presales selling advantages of using Expedition? (Choose two.)
A. map migration gaps to professional services statement of Works (SOWs)
B. streamline & migrate to Layer7 policies using Policy Optimizer
C. reduce effort to implement policies based on App-ID and User-ID
D. easy migration process to move to Palo Alto Networks NGFWs - Answer-ad
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy
firewall product? (Choose two.)
A. Traffic is separated by zones
B. Policy match is based on application
C. Identification of application is possible on any port
D. Traffic control is based on IP port, and protocol - Answer-bc
An administrator wants to justify the expense of a second Panorama appliance for HA of
the management layer.
The customer already has multiple M-100s set up as a log collector group. What are two
valid reasons for deploying Panorama in High Availability? (Choose two.)
A. Control of post rules
B. Control local firewall rules
C. Ensure management continuity
D.Improve log collection redundancy - Answer-cd
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the
specified virtual SD-WAN interface, along with the performance metrics?
a. >show sdwan rule interface <sdwan.x>
b. >show sdwan connection all
c. >show sdwan path-monitor
d. >show sdwan session
A. Option
B. Option
C. Option
D. Option - Answer-a
Which two network events are highlighted through correlation objects as potential
security risks?
(Choose two.)
A. Identified vulnerability exploits
B. Launch of an identified malware executable file
C. Endpoints access files from a removable drive
, D. Suspicious host behavior - Answer-ad
Which three categories are identified as best practices in the Best Practice Assessment
tool? (Choose three.)
A. use of decryption policies
B. measure the adoption of URL filters. App-ID. User-ID
C. use of device management access and settings
D. expose the visibility and presence of command-and-control sessions
E. identify sanctioned and unsanctioned SaaS applications - Answer-be
In which two cases should the Hardware offering of Panorama be chosen over the
Virtual Offering?
(Choose two.)
A. Dedicated Logger Mode is required
B. Logs per second exceed 10,000
C. Appliance needs to be moved into data center
D. Device count is under 100 - Answer-ab
How do you configure the rate of file submissions to WildFire in the NGFW?
A. based on the purchased license uploaded
B. QoS tagging
C. maximum number of files per minute
D. maximum number of files per day - Answer-c
Palo Alto Networks publishes updated Command-and-Control signatures. How
frequently should the related signatures schedule be set?
A. Once a day
B. Once a week
C. Once every minute
D. Once an hour - Answer-a
Which are the three mandatory components needed to run Cortex XDR? (Choose
three.)
A. Panorama
B. NGFW with PANOS 8 0.5 or later
C. Cortex Data Lake
D. Traps
E. Pathfinder
F. Directory Syn Service - Answer-bcf
Which selection must be configured on PAN-OS External Dynamic Lists to support
MineMeld indicators?
A. Prototype
B. Inputs
C. Class
D. Feed Base URL - Answer-d
with Answers
What are two presales selling advantages of using Expedition? (Choose two.)
A. map migration gaps to professional services statement of Works (SOWs)
B. streamline & migrate to Layer7 policies using Policy Optimizer
C. reduce effort to implement policies based on App-ID and User-ID
D. easy migration process to move to Palo Alto Networks NGFWs - Answer-ad
Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy
firewall product? (Choose two.)
A. Traffic is separated by zones
B. Policy match is based on application
C. Identification of application is possible on any port
D. Traffic control is based on IP port, and protocol - Answer-bc
An administrator wants to justify the expense of a second Panorama appliance for HA of
the management layer.
The customer already has multiple M-100s set up as a log collector group. What are two
valid reasons for deploying Panorama in High Availability? (Choose two.)
A. Control of post rules
B. Control local firewall rules
C. Ensure management continuity
D.Improve log collection redundancy - Answer-cd
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the
specified virtual SD-WAN interface, along with the performance metrics?
a. >show sdwan rule interface <sdwan.x>
b. >show sdwan connection all
c. >show sdwan path-monitor
d. >show sdwan session
A. Option
B. Option
C. Option
D. Option - Answer-a
Which two network events are highlighted through correlation objects as potential
security risks?
(Choose two.)
A. Identified vulnerability exploits
B. Launch of an identified malware executable file
C. Endpoints access files from a removable drive
, D. Suspicious host behavior - Answer-ad
Which three categories are identified as best practices in the Best Practice Assessment
tool? (Choose three.)
A. use of decryption policies
B. measure the adoption of URL filters. App-ID. User-ID
C. use of device management access and settings
D. expose the visibility and presence of command-and-control sessions
E. identify sanctioned and unsanctioned SaaS applications - Answer-be
In which two cases should the Hardware offering of Panorama be chosen over the
Virtual Offering?
(Choose two.)
A. Dedicated Logger Mode is required
B. Logs per second exceed 10,000
C. Appliance needs to be moved into data center
D. Device count is under 100 - Answer-ab
How do you configure the rate of file submissions to WildFire in the NGFW?
A. based on the purchased license uploaded
B. QoS tagging
C. maximum number of files per minute
D. maximum number of files per day - Answer-c
Palo Alto Networks publishes updated Command-and-Control signatures. How
frequently should the related signatures schedule be set?
A. Once a day
B. Once a week
C. Once every minute
D. Once an hour - Answer-a
Which are the three mandatory components needed to run Cortex XDR? (Choose
three.)
A. Panorama
B. NGFW with PANOS 8 0.5 or later
C. Cortex Data Lake
D. Traps
E. Pathfinder
F. Directory Syn Service - Answer-bcf
Which selection must be configured on PAN-OS External Dynamic Lists to support
MineMeld indicators?
A. Prototype
B. Inputs
C. Class
D. Feed Base URL - Answer-d
