PSE Strata Practice Test practice questions, page 5 of 6, with answer review and explanations.
Question 21
Which three features are used to prevent abuse of stolen credentials? (Choose three.)
multi-factor authentication
URL Filtering Profiles
WildFire Profiles
Prisma Access
SSL decryption rules
Question 22
A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?
File Blocking Profile
DoS Protection Profile
URL Filtering Profile
Vulnerability Protection Profile
Question 23
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)
validate credential submission detection
enable User-ID
define an SSL decryption rulebase
define URL Filtering Profile
Enable App-ID
Question 24
A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?
Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports
Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis
Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application- specified ports
Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default
Question 25
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)