PSE-Strata Palo Alto Networks System Engineer Professional - Strata Questions and Answers

A customer worried about unknown attacks is hesitant to enable SSL decryption due to privacy

and regulatory issues. How does the platform address the customer’s concern?

A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.

Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

What will best enhance security of a production online system while minimizing the impact for the existing network?

An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.

The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)

Which filtering criterion is used to determine users to be included as members of a dynamic user group (DUG)?

What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)

Which Security profile on the Next-Generation Firewall (NGFW) includes Signatures to protect against brute force attacks?

Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

How frequently do WildFire signatures move into the antivirus database?

Which three platform components can identify and protect against malicious email links? (Choose three.)

WildFire can discover zero-day malware in which three types of traffic? (Choose three)

Which two features are key in preventing unknown targeted attacks? (Choose two)

Which two methods are used to check for Corporate Credential Submissions? (Choose two.)

Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)

A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).

Which Security profile is used to configure Domain Name Security (DNS) to Identity and block

previously unknown DGA-based threats in real time?

As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)