PSE-Strata Pre-Exam Practice Tests (Updated 224 Questions) [Q40-Q64]

QUESTION 40
Which three features are used to prevent abuse of stolen credentials? (Choose three.)

QUESTION 41
Which three of the following actions must be taken to enable Credential Phishing Prevention?
(Choose three.)

QUESTION 42
A packet that is already associated with a current session arrives at the firewall. What is the flow of the packet after the firewall determines that it is matched with an existing session?

QUESTION 43
Which three activities can the botnet report track? (Choose three.)

QUESTION 44
Which built-in feature of PAN-OS allows the NGFW administrator to create a policy that provides autoremediation for anomalous user behavior and malicious activity while maintaining user visibility?

QUESTION 45
Which component is needed for a large-scale deployment of NGFWs with multiple Panorama Management Servers?

QUESTION 46
Which two components must to be configured within User-ID on a new firewall that has been implemented? (Choose two.)

QUESTION 47
True or False: PAN-DB is a service that aligns URLs with category types and is fed to the WildFire threat cloud.

QUESTION 48
A Fortune 500 customer has expressed interest in purchasing WildFire; however, they do not want to send discovered malware outside of their network.
Which version of WildFire will meet this customer’s requirements?

QUESTION 49
Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

QUESTION 50
Which two of the following does decryption broker provide on a NGFW? (Choose two.)

QUESTION 51
Which two products can send logs to the Cortex Data Lake? (Choose two.)

QUESTION 52
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

QUESTION 53
Which two of the following are required when configuring the Domain Credential Filter method for preventing phishing attacks? (Choose two.)

QUESTION 54
Drag and Drop Question
Match the WildFire Inline Machine Learning Model to the correct description for that model.

QUESTION 55
WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through.
Which command returns a valid result to verify the ML is working from the command line.

QUESTION 56
In PAN-OS 10.0 and later, DNS Security allows policy actions to be applied based on which three domains? (Choose three.)

QUESTION 57
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)

QUESTION 58
What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)

QUESTION 59
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

QUESTION 60
When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?

QUESTION 61
A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today’s security infrastructure.
Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?

QUESTION 62
When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

QUESTION 63
What are two advantages of the DNS Sinkholing feature? (Choose two.)

QUESTION 64
Which two features are found in Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)