Palo Alto Networks PSE-SASE Exam Practice Questions (P. 5)
- Full Access (124 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #21
What are two ways service connections and remote network connections differ? (Choose two.)
- ARemote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.
- BRemote network connections enforce security policies, but service connections do not.Most Voted
- CAn on-premises resource cannot originate a connection to the internet over a service connection.
- DService connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.
Correct Answer:
A
A
send
light_mode
delete
Question #22
What can prevent users from unknowingly downloading potentially malicious file types from the internet?
- AApply a File Blocking profile to Security policy rules that allow general web access.Most Voted
- BApply a Zone Protection profile to the untrust zone.
- CAssign an Antivirus profile to Security policy rules that deny general web access.
- DAssign a Vulnerability profile to Security policy rules that deny general web access.
Correct Answer:
A
A
send
light_mode
delete
Question #23
Text of question will be provided later…A. It applies configuration changes and provides credential management, role-based controls, and a playbook repository.
- AIt provides customized forms to collect and validate necessary parameters from the requester.
- BIt natively ingests, normalizes, and integrates granular data across the security infrastructure at nearly half the cost of legacy security products attempting to solve the problem.
- CIt provides IT teams with single-pane visibility that leverages endpoint, simulated, and real-time user traffic data to provide the most complete picture of user traffic flows possible.
Correct Answer:
D
D
send
light_mode
delete
Question #24
How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?
- AEnable syslog on the Instant-On Network (ION) device.Most Voted
- BUse a zone-based firewall to export directly through application program interface (API) to the SIEM.
- CEnable Simple Network Management Protocol (SNMP) on the Instant-On Network (ION) device.
- DUse the centralized flow data-export tool built into the controller.
Correct Answer:
A
A
send
light_mode
delete
Question #25
Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.
Which proxy should be used to decrypt this traffic?
Which proxy should be used to decrypt this traffic?
- ASCP Proxy
- BSSL Inbound Proxy
- CSSH Forward Proxy
- DSSL Forward ProxyMost Voted
Correct Answer:
B
B
send
light_mode
delete
All Pages