Online Access Free PSE-Strata-Pro-24 Exam Questions

Which two files are used to deploy CN-Series firewalls in Kubernetes clusters? (Choose two.)

• A.PAN-CN-MGMT-CONFIGMAP
• B.PAN-CN-NGFW-CONFIG
• C.PAN-CNI-MULTUS
• D.PAN-CN-MGMT

Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

• A.User-ID
• B.Captive portal
• C.SCP log ingestion
• D.XML API

Which three tools can a prospective customer use to evaluate Palo Alto Networks products to assess where they will fit in the existing architecture? (Choose three)

• A.Security Lifecycle Review (SLR)
• B.Ultimate Test Drive
• C.Expedition
• D.Proof of Concept (POC)
• E.Policy Optimizer

Which statement appropriately describes performance tuning Intrusion Prevention System (IPS) functions on a Palo Alto Networks NGFW running Advanced Threat Prevention?

• A.Work with TAC to run a debug and receive exact measurements of performance utilization for the IPS.
• B.Create a new threat profile to use only signatures needed for the environment.
• C.Leave all signatures turned on because they do not impact performance.
• D.To increase performance, disable any threat signatures that do not apply to the environment.

A current NGFW customer has asked a systems engineer (SE) for a way to prove to their internal management team that its NGFW follows Zero Trust principles. Which action should the SE take?

• A.Use the "Monitor > PDF Reports" node to schedule a weekly email of the Zero Trust report to the internal management team.
• B.Use a third-party tool to pull the NGFW Zero Trust logs, and create a report that meets the customer's needs.
• C.Use the "ACC" tab to help the customer build dashboards that highlight the historical tracking of the NGFW enforcing policies.
• D.Help the customer build reports that align to their Zero Trust plan in the "Monitor > Manage Custom Reports" tab.