Free PSE-Strata-Pro-24 Exam Dumps

Question 6

A current NGFW customer has asked a systems engineer (SE) for a way to prove to their internal management team that its NGFW follows Zero Trust principles. Which action should the SE take?

A. Use the "Monitor > PDF Reports" node to schedule a weekly email of the Zero Trust report to the internal management team.
B. Help the customer build reports that align to their Zero Trust plan in the "Monitor > Manage Custom Reports" tab.
C. Use a third-party tool to pull the NGFW Zero Trust logs, and create a report that meets the customer's needs.
D. Use the "ACC" tab to help the customer build dashboards that highlight the historical tracking of the NGFW enforcing policies.

Correct Answer:B

Question 7

Which use case is valid for Palo Alto Networks Next-Generation Firewalls (NGFWs)?

A. Code-embedded NGFWs provide enhanced internet of things (IoT) security by allowing PAN-OS code to be run on devices that do not support embedded virtual machine (VM) images.
B. Serverless NGFW code security provides public cloud security for code-only deployments that do not leverage virtual machine (VM) instances or containerized services.
C. IT/OT segmentation firewalls allow operational technology resources in plant networks to securely interface with IT resources in the corporate network.
D. PAN-OS GlobalProtect gateways allow companies to run malware and exploit prevention modules on their endpoints without installing endpoint agents.

Correct Answer:C

Question 8

A systems engineer (SE) has joined a team to work with a managed security services provider (MSSP) that is evaluating PAN-OS for edge connections to their customer base. The MSSP is concerned about how to efficiently handle routing with all of its customers, especially how to handle BGP peering, because it has created a standard set of rules and settings that it wants to apply to each customer, as well as to maintain and update them. The solution requires logically separated BGP peering setups for each customer. What should the SE do to increase the probability of Palo Alto Networks being awarded the deal?

A. Work with the MSSP to plan for the enabling of logical routers in the PAN-OS Advanced Routing Engine to allow sharing of routing profiles across the logical routers.
B. Collaborate with the MSSP to create an API call with a standard set of routing filters, maps, and related actions, then the MSSP can call the API whenever they bring on a new customer.
C. Confirm to the MSSP that the existing virtual routers will allow them to have logically separated BGP peering setups, but that there is no method to handle the standard criteria across all of the routers.
D. Establish with the MSSP the use of vsys as the better way to segregate their environment so that customer data does not intermingle.

Correct Answer:A

Question 9

What is used to stop a DNS-based threat?

A. DNS proxy
B. Buffer overflow protection
C. DNS tunneling
D. DNS sinkholing

Correct Answer:D

Question 10

Which two actions should a systems engineer take when a customer is concerned about how to remain aligned to Zero Trust principles as they adopt additional security features over time? (Choose two)

A. Turn on all licensed Cloud-Delivered Security Services (CDSS) subscriptions in blocking mode for all policies.
B. Apply decryption where possible to inspect and log all new and existing traffic flows.
C. Use the Best Practice Assessment (BPA) tool to measure progress toward Zero Trust principles.
D. Use the Policy Optimizer tool to understand security rules allowing users to bypass decryption.

Correct Answer:BC