PSE Strata Practice Test

PSE Strata Practice Test practice questions, page 2 of 6, with answer review and explanations.

Question 6

What two types of certificates are used to configure SSL Forward Proxy? (׀¡hoose two.)

  1. Enterprise CA-signed certificates
  2. Self-Signed certificates
  3. Intermediate certificates
  4. Private key certificates

Question 7

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

  1. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
  2. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
  3. Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
  4. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Question 8

There are different Master Keys on Panorama and managed firewalls. What is the result if a Panorama Administrator pushes configuration to managed firewalls?

  1. The push operation will fail regardless of an error or not within the configuration itself
  2. Provided there's no error within the configuration to be pushed, the push will succeed
  3. The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama
  4. There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

Question 9

Which task would be identified in Best Practice Assessment tool?

  1. identify the visibility and presence of command-and-control sessions
  2. identify sanctioned and unsanctioned SaaS applications
  3. identify the threats associated with each application
  4. identify and provide recommendations for device management access

Question 10

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds. How is this goal accomplished?

  1. Create a custom spyware signature matching the known signature with the time attribute
  2. Add a correlation object that tracks the occurrences and triggers above the desired threshold
  3. Submit a request to Palo Alto Networks to change the behavior at the next update
  4. Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency