Free Palo Alto Networks PSE-Strata-Pro-24 Exam Questions

Question 1

A customer asks a systems engineer (SE) how Palo Alto Networks can claim it does not lose throughput performance as more Cloud-Delivered Security Services (CDSS) subscriptions are enabled on the firewall. Which two concepts should the SE explain to address the customer's concern? (Choose two.)

A : Parallel Processing

B : Advanced Routing Engine

C : Single Pass Architecture

D : Management Data Plane Separation

Answer: C,D

Question 2

Which statement appropriately describes performance tuning Intrusion Prevention System (IPS) functions on a Palo Alto Networks NGFW running Advanced Threat Prevention?

A : Leave all signatures turned on because they do not impact performance.

B : Create a new threat profile to use only signatures needed for the environment.

C : Work with TAC to run a debug and receive exact measurements of performance utilization for the IPS.

D : To increase performance, disable any threat signatures that do not apply to the environment.

Answer: B

Question 3

Which statement appropriately describes performance tuning Intrusion Prevention System (IPS) functions on a Palo Alto Networks NGFW running Advanced Threat Prevention?

A : Leave all signatures turned on because they do not impact performance.

B : Create a new threat profile to use only signatures needed for the environment.

C : Work with TAC to run a debug and receive exact measurements of performance utilization for the IPS.

D : To increase performance, disable any threat signatures that do not apply to the environment.

Answer: B

Question 4

A large global company plans to acquire 500 NGFWs to replace its legacy firewalls and has a specific requirement for centralized logging and reporting capabilities. What should a systems engineer recommend?

A : Combine Panorama for firewall management with Palo Alto Networks' cloud-based Strata Logging Service to offer scalability for the company's logging and reporting infrastructure.

B : Use Panorama for firewall management and to transfer logs from the 500 firewalls directly to a third-party SIEM for centralized logging and reporting.

C : Highlight the efficiency of PAN-OS, which employs AI to automatically extract critical logs and generate daily executive reports, and confirm that the purchase of 500 NGFWs is sufficient.

D : Deploy a pair of M-1000 log collectors in the customer data center, and route logs from all 500 firewalls to the log collectors for centralized logging and reporting.

Answer: A

Question 5