Online Access Free PSE-Strata-Pro-24 Exam Questions

What is used to stop a DNS-based threat?

• A.DNS tunneling
• B.DNS proxy
• C.Buffer overflow protection
• D.DNS sinkholing

A company with a large Active Directory (AD) of over 20,000 groups has user roles based on group membership in the directory. Up to 1,000 groups may be used in Security policies. The company has limited operations personnel and wants to reduce the administrative overhead of managing the synchronization of the groups with their firewalls.
What is the recommended architecture to synchronize the company's AD with Palo Alto Networks firewalls?

• A.Configure a group mapping profile with custom filters for LDAP attributes that are mapped to the user roles.
• B.Configure NGFWs to synchronize with the AD after deploying the Cloud Identity Engine (CIE) and agents.
• C.Configure a group mapping profile with an include group list.
• D.Configure a group mapping profile, without a filter, to synchronize all groups.

A customer asks a systems engineer (SE) how Palo Alto Networks can claim it does not lose throughput performance as more Cloud-Delivered Security Services (CDSS) subscriptions are enabled on the firewall.
Which two concepts should the SE explain to address the customer's concern? (Choose two.)

• A.Parallel Processing
• B.Single Pass Architecture
• C.Management Data Plane Separation
• D.Advanced Routing Engine

A prospective customer is interested in Palo Alto Networks NGFWs and wants to evaluate the ability to segregate its internal network into unique BGP environments.
Which statement describes the ability of NGFWs to address this need?

• A.It cannot be addressed because PAN-OS does not support it.
• B.It can be addressed with BGP confederations.
• C.It cannot be addressed because BGP must be fully meshed internally to work.
• D.It can be addressed by creating multiple eBGP autonomous systems.

What are the first two steps a customer should perform as they begin to understand and adopt Zero Trust principles? (Choose two)

• A.Map the transactions between users, applications, and data, then verify and inspect those transactions.
• B.Enable relevant Cloud-Delivered Security Services (CDSS) subscriptions to automatically protect the customer's environment from both internal and external threats.
• C.Understand which users, devices, infrastructure, applications, data, and services are part of the network or have access to it.
• D.Implement VM-Series NGFWs in the customer's public and private clouds to protect east-west traffic.