Palo Alto Networks System Engineer Professional - SASE v1.0

Page:    1 / 5   
Exam contains 65 questions
Expand All

Which statement applies to Prisma Access licensing?

  • A. Internet of Things (IOT) Security is included with each license.
  • B. It provides cloud-based, centralized log storage and aggregation.
  • C. It is a perpetual license required to enable support for multiple virtual systems on PA-3200 Series firewalls.
  • D. For remote network and Clean Pipe deployments, a unit is defined as 1 Mbps of bandwidth.


Answer : D

What are three ways the secure access service edge (SASE) model can help an organization? (Choose three.)

  • A. cost savings
  • B. data protection
  • C. increased licensing requirements
  • D. increased performance
  • E. decreased reliance on best practices


Answer : ABD

Which element of a secure access service edge (SASE)-enabled network provides true integration of services, not service chains, with combined services and visibility for all locations, mobile users, and the cloud?

  • A. identity and network location
  • B. broad network-edge support
  • C. converged WAN edge and network security
  • D. cloud-native, cloud-based delivery


Answer : D

How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?

  • A. Users are mapped via server logs for login events and syslog messages from authenticating services.
  • B. It uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.
  • C. It prompts the browser to present a valid client certificate to authenticate the user.
  • D. Users access the SWG, which then connects the user to the website while still performing security measures.


Answer : D

Which two services are part of the Palo Alto Networks cloud-delivered security services (CDSS) package? (Choose two.)

  • A. virtual desktop infrastructure (VDI)
  • B. Internet of Things (IoT) Security
  • C. Advanced URL Filtering (AURLF)
  • D. security information and event management (SIEM)


Answer : BC

How does the Palo Alto Networks secure access service edge (SASE) solution enable Zero Trust in a customer environment?

  • A. It stops attacks that use DNS for command and control or data theft.
  • B. It feeds threat intelligence into an automation engine for rapid and consistent protections.
  • C. It classifies sites based on content, features, and safety.
  • D. It continuously validates every stage of a digital interaction.


Answer : D

Which two services are provided by Prisma Access Insights? (Choose two.)

  • A. summary overview screen of the health and performance of an organization's entire Prisma Access environment
  • B. configuration of the on-premises firewall located behind the service-connection termination
  • C. detection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise's data
  • D. multiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure


Answer : AD

Which product enables websites to be rendered in a sandbox environment in order to detect and remove malware and threats before they reach the endpoint?

  • A. remote browser isolation
  • B. secure web gateway (SWG)
  • C. network sandbox
  • D. DNS Security


Answer : B

A customer currently has 150 Mbps of capacity at a site. Records show that, on average, a total of 30 Mbps of bandwidth is used for the two links.
What is the appropriate Prisma SD-WAN license for this site?

  • A. 50 Mbps
  • B. 175 Mbps
  • C. 250 Mbps
  • D. 25 Mbps


Answer : A

Which product leverages GlobalProtect agents for endpoint visibility and native Prisma SD-WAN integration for remote sites and branches?

  • A. Cloud-Delivered Security Services (CDSS)
  • B. WildFire
  • C. CloudBlades:
  • D. Autonomous Digital Experience Management (ADEM)


Answer : A

Which two key benefits have been identified for a customer investing in the Palo Alto Networks Prisma secure access service edge (SASE) solution? (Choose two.)

  • A. decreased likelihood of a data breach
  • B. reduced input required from management during third-party investigations
  • C. decreased need for interaction between branches
  • D. reduced number of security incidents requiring manual investigation


Answer : BD

What is an advantage of next-generation SD-WAN over legacy SD-WAN solutions?

  • A. It enables definition of the privileges and responsibilities of administrative users in a network.
  • B. It allows configuration to forward logs to external logging destinations, such as syslog servers.
  • C. It steers traffic and defines networking and security policies from an application-centric perspective, rather than a packet-based approach.
  • D. It provides the ability to push common configurations, configuration updates, and software upgrades to all or a subset of the managed appliances.


Answer : C

Which elements of Autonomous Digital Experience Management (ADEM) help provide end-to-end visibility of everything in an organization's environment?

  • A. integrated threat intelligence management, automated distribution to enforcement points at scale, full ticket mirroring
  • B. scanning of all traffic, ports, and protocols
  • C. data collected from endpoint devices, synthetic monitoring tests, and real-time traffic
  • D. alerts, artifacts, and MITRE tactics


Answer : A

Which two statements apply to features of aggregate bandwidth allocation in Prisma Access for remote networks? (Choose two.)

  • A. Administrator can allocate up to 120% of the total bandwidth purchased for aggregate locations to support traffic peaks.
  • B. Administrator must assign a minimum of 50 MB to any compute location that will support remote networks.
  • C. Administrator is not required to allocate all purchased bandwidth to compute locations for the configuration to be valid.
  • D. Bandwidth that is allocated to a compute location is statically and evenly distributed across remote networks in that location.


Answer : AC

The Cortex Data Lake sizing calculator for Prisma Access requires which three values as inputs? (Choose three.)

  • A. throughput of remote networks purchased
  • B. cloud-managed or Panorama-managed deployment
  • C. retention period for the logs to be stored
  • D. number of log-forwarding destinations
  • E. number of mobile users purchased


Answer : ACE

Page:    1 / 5   
Exam contains 65 questions
Expand All

Talk to us!

Have any questions or issues ? Please dont hesitate to contact us

[email protected]

Certlibrary.com is owned by MBS Tech Limited: Room 1905 Nam Wo Hong Building, 148 Wing Lok Street, Sheung Wan, Hong Kong. Company registration number: 2310926
Certlibrary doesn't offer Real Microsoft Exam Questions. Certlibrary Materials do not contain actual questions and answers from Cisco's Certification Exams.
CFA Institute does not endorse, promote or warrant the accuracy or quality of Certlibrary. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Terms & Conditions | Privacy Policy