PSE Strata Practice Test

PSE Strata Practice Test practice questions, page 3 of 6, with answer review and explanations.

Question 11

Which two features are found in Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)

  1. Policy match is based on application
  2. Traffic control is based on IP, port, and protocol
  3. Traffic is separated by zones
  4. Identification of application is possible on any port

Question 12

For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.)

  1. Network segments in the Datacenter need to be advertised to only one Service Connection
  2. The customer edge device needs to support policy-based routing with symmetric return functionality
  3. The resources in the Datacenter will only be able to reach remote network resources that share the same region
  4. A maximum of four service connections per Datacenter are supported with this topology

Question 13

Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

  1. use of device management access and settings
  2. identify sanctioned and unsanctioned SaaS applications
  3. expose the visibility and presence of command-and-control sessions
  4. measure the adoption of URL filters, App-ID, User-ID
  5. use of decryption policies

Question 14

You have a prospective customer that is looking for a way to provide secure temporary access to contractors for a designated period of time. They currently add contractors to existing user groups and create ad hoc policies to provide network access. They admit that once the contractor no longer needs access to the network, administrators are usually too busy to manually delete policies that provided access to the contractor. This has resulted in over-provisioned access that has allowed unauthorized access to their systems. They are looking for a solution to automatically remove access for contractors once access is no longer required. You address their concern by describing which feature in the NGFW?

  1. Dynamic User Groups
  2. Dynamic Address Groups
  3. Multi-factor Authentication
  4. External Dynamic Lists

Question 15

Which methods are used to check for Corporate Credential Submissions? (Choose three.)

  1. Group Mapping
  2. IP User Mapping
  3. LDAP query
  4. Domain Credential Filter
  5. User ID Credential Check