Question No. 1

An administrator needs a PDF summary report that contains information compiled from existing reports based on data for the top 5 in each category.

How often will the Administrator receive the report?

ABi-weekly

BDaily

CWeekly

DMonthly

Show Answer

Correct Answer: B

Question No. 2

Which design objective could be satisfied by vsys functionality?

ASeparation of routing tables used by different departments in company

BProvide same-device high availability functionality for different departments in a company

CAdministrative separation of firewall policies used by different departments in company

DAllocate firewall hardware resources to different departments in a company

Show Answer

Correct Answer: C

Question No. 3

What two advantages of the DNS Sinkholing feature? (Choose two)

AIt can be deployed independently of an Anti-Spyware Profile.

BIt is monitoring DNS requests passively for malware domains.

CIt can work upstream from the internal DNS server.

DIt is forging DNS replies to known malicious domains.

Show Answer

Correct Answer: C, D

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns-sinkholing

Question No. 4

DNS sinkholing helps identify infected hosts on the protected network using DNS traffic in situations where the firewall cannot see the infected client's DNS query (that is, the firewall cannot see the originator of DNS query)

Which of the following Statements is true?

ADNS Sinkholing requires the Vulnerability Protection Profile be enabled.

BSinkholing malware DNS queries solves this visibilty problem by forging responses to the client host queries directed at fake domains created in a controlled 'Fake Internet' called Zanadu which designed for testing and honeypots.

CInfected hosts can then be easily identified in the traffic logs because any host that attempts to connect the sinkhole IP address are most likely infected with malware.

DDNS Sinkholing requires a license SinkHole license in order to activate.

Show Answer

Correct Answer: C

Question No. 5

Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

ACreate an anti-spyware profile to block all spyware

BCreate a vulnerability protection profile to block all the vulnerabilities with severity low and higher

CCreate an SSL Decryption policy to decrypt 100% of the traffic

DCreate an antivirus profile to block all content that matches and antivirus signature

ECreate a WildFire profile to schedule file uploads during low network usage windows

Show Answer

Correct Answer: B, C, E

Free Palo Alto Networks PSE-Platform Exam Actual Questions

The questions for PSE-Platform were last updated On Nov 17, 2024