PSE-SASE Practice Test

PSE-SASE Practice Test practice questions, page 5 of 5, with answer review and explanations.

Question 21

What are two ways service connections and remote network connections differ? (Choose two.)

  1. Remote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.
  2. Remote network connections enforce security policies, but service connections do not.
  3. An on-premises resource cannot originate a connection to the internet over a service connection.
  4. Service connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.

Question 22

What can prevent users from unknowingly downloading potentially malicious file types from the internet?

  1. Apply a File Blocking profile to Security policy rules that allow general web access.
  2. Apply a Zone Protection profile to the untrust zone.
  3. Assign an Antivirus profile to Security policy rules that deny general web access.
  4. Assign a Vulnerability profile to Security policy rules that deny general web access.

Question 23

Text of question will be provided later…A. It applies configuration changes and provides credential management, role-based controls, and a playbook repository.

  1. It provides customized forms to collect and validate necessary parameters from the requester.
  2. It natively ingests, normalizes, and integrates granular data across the security infrastructure at nearly half the cost of legacy security products attempting to solve the problem.
  3. It provides IT teams with single-pane visibility that leverages endpoint, simulated, and real-time user traffic data to provide the most complete picture of user traffic flows possible.

Question 24

How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?

  1. Enable syslog on the Instant-On Network (ION) device.
  2. Use a zone-based firewall to export directly through application program interface (API) to the SIEM.
  3. Enable Simple Network Management Protocol (SNMP) on the Instant-On Network (ION) device.
  4. Use the centralized flow data-export tool built into the controller.