Online Access Free PSE-Platform Exam Questions

What two advantages of the DNS Sinkholing feature? (Choose two)

• A.It can work upstream from the internal DNS server.
• B.It is monitoring DNS requests passively for malware domains.
• C.It can be deployed independently of an Anti-Spyware Profile.
• D.It is forging DNS replies to known malicious domains.

Which Palo Alto Networks security platform component should an administrator use to extend policies to remote users are not connecting to the internet from behind a firewall?

• A.Threat Intelligence Cloud
• B.Aperture
• C.Traps
• D.GlobalProtect

A prospective customer was the victim of a zero-day attack that compromised specific employees, who then became unwitting attack vectors. The customer does not want that to happen again.
Which two Palo Alto Networks platform components will help this customer? (Choose two.)

• A.Traps
• B.Autofocus
• C.Wildfire
• D.Correlation Objects

Which configuration creates the most comprehensive "best-practice" Anti Spyware profile to prevent command and Control traffic?

• A.Clone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone
• B.Clone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone
• C.Edit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)
• D.Edit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

Which three policies or certificates must be configured for SSL Forward Proxy decryption?
(Choose three.)

• A.Forward untrust certificate
• B.A decrypt port mirror policy
• C.A decryption policy
• D.Internal server certificate
• E.Forward trust certificate