Pass Your Palo Alto Networks PSE-Strata Exam with Correct 140 Questions and Answers [Q43-Q66]

QUESTION 43
Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

QUESTION 44
Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

QUESTION 45
Which security profile on the NGFW includes signatures to protect you from brute force attacks?

QUESTION 46
In PAN-OS 10.0 and later, DNS Security allows policy actions to be applied based on which three domains? (Choose three.)

QUESTION 47
A packet that is already associated with a current session arrives at the firewall.
What is the flow of the packet after the firewall determines that it is matched with an existing session?

QUESTION 48
Which profile or policy should be applied to protect against port scans from the internet?

QUESTION 49
How do you configure the rate of file submissions to WildFire in the NGFW?

QUESTION 50
A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at
100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

QUESTION 51
Which CLI commands allows you to view SD-WAN events such as path selection and path quality measurements?

QUESTION 52
A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

QUESTION 53
WildFire machine learning (ML) for portable executable (PE) files is enabled in the antivirus profile and added to the appropriate firewall rules in the profile. In the Palo Alto Networks WildFire test av file, an attempt to download the test file is allowed through.
Which command returns a valid result to verify the ML is working from the command line.

QUESTION 54
XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer’s requirements? (Choose two.)

QUESTION 55
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

QUESTION 56
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

QUESTION 57
Which three activities can the botnet report track? (Choose three.)

QUESTION 58
Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

QUESTION 59
What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

QUESTION 60
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

QUESTION 61
As you prepare to scan your Amazon S3 account, what enables Prisma service permission to access Amazon S3?

QUESTION 62
Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.)

QUESTION 63
Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?

QUESTION 64
What are two advantages of the DNS Sinkholing feature? (Choose two.)

QUESTION 65
A customer with a fully licensed Palo Alto Networks firewall is concerned about threats based on domain generation algorithms (DGAS).
Which Security profile is used to configure Domain Name Security (DNS) to Identity and block previously unknown DGA-based threats in real time?

QUESTION 66
In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)