Palo Alto Networks PSE Strata Pro 24
Q: 1
A security engineer has been tasked with protecting a company's on-premises web servers but is not
authorized to purchase a web application firewall (WAF).
Which Palo Alto Networks solution will protect the company from SQL injection zero-day, command
injection zero-day, Cross-Site Scripting (XSS) attacks, and IIS exploits?
Options
Q: 2
A company plans to deploy identity for improved visibility and identity-based controls for least
privilege access to applications and dat
a. The company does not have an on-premises Active Directory (AD) deployment, and devices are
connected and managed by using a combination of Entra ID and Jamf.
Which two supported sources for identity are appropriate for this environment? (Choose two.)
Options
Q: 3
Which action can help alleviate a prospective customer's concerns about transitioning from a legacy
firewall with port-based policies to a Palo Alto Networks NGFW with application-based policies?
Options
Q: 4
What are three valid Panorama deployment options? (Choose three.)
Options
Q: 5
A systems engineer should create a profile that blocks which category to protect a customer from
ransomware URLs by using Advanced URL Filtering?
Options
Q: 6
Which three use cases are specific to Policy Optimizer? (Choose three.)
Options
Q: 7
A customer sees unusually high DNS traffic to an unfamiliar IP address. Which Palo Alto Networks
Cloud-Delivered Security Services (CDSS) subscription should be enabled to further inspect this
traffic?
Options
Q: 8
Which use case is valid for Palo Alto Networks Next-Generation Firewalls (NGFWs)?
Options
Q: 9
In addition to DNS Security, which three Cloud-Delivered Security Services (CDSS) subscriptions are
minimum recommendations for all NGFWs that handle north-south traffic? (Choose three)
Options
Q: 10
While a quote is being finalized for a customer that is purchasing multiple PA-5400 series firewalls,
the customer specifies the need for protection against zero-day malware attacks.
Which Cloud-Delivered Security Services (CDSS) subscription add-on license should be included in
the quote?
Options
Question 1 of 10
