Palo Alto Networks PSE-Strata-Pro-24 Palo Alto Networks Systems Engineer Professional - Hardware Firewall Exam Exam Practice Test Questions

• Question 1

  The PAN-OS User-ID integrated agent is included with PAN-OS software and comes in which two forms? (Choose two.)

  • Integrated agent
  • GlobalProtect agent
  • Windows-based agent
  • Cloud Identity Engine (CIE)

  Show Answer Answer: A, ,C Next

• Question 2

  A company with Palo Alto Networks NGFWs protecting its physical data center servers is experiencing a performance issue on its Active Directory (AD) servers due to high numbers of requests and updates the NGFWs are placing on the servers. How can the NGFWs be enabled to efficiently identify users without overloading the AD servers?

  • Configure Cloud Identity Engine to learn the users' IP address-user mappings from the AD authentication logs.
  • Configure an NGFW as a GlobalProtect gateway, then have all users run GlobalProtect Windows SSO to gather user information.
  • Configure data redistribution to redistribute IP address-user mappings from a hub NGFW to the other spoke NGFWs.
  • Configure an NGFW as a GlobalProtect gateway, then have all users run GlobalProtect agents to gather user information.

  Show Answer Answer: A Next

• Question 3

  Which action can help alleviate a prospective customer's concerns about transitioning from a legacy firewall with port-based policies to a Palo Alto Networks NGFW with application-based policies?

  • Discuss the PAN-OS Policy Optimizer feature as a means to safely migrate port-based rules to application-based rules.
  • Assure the customer that the migration wizard will automatically convert port-based rules to application-based rules upon installation of the new NGFW.
  • Recommend deploying a new NGFW firewall alongside the customer's existing port-based firewall until they are comfortable removing the port-based firewall.
  • Reassure the customer that the NGFW supports the continued use of port-based rules, as PAN-OS automatically translates these policies into application-based policies.

  Show Answer Answer: A Next

• Question 4

  What are two methods that a NGFW uses to determine if submitted credentials are valid corporate credentials? (Choose two.)

  • Group mapping
  • LDAP query
  • Domain credential filter
  • WMI client probing

  Show Answer Answer: B, ,C Next

• Question 5

  An existing customer wants to expand their online business into physical stores for the first time. The customer requires NGFWs at the physical store to handle SD-WAN, security, and data protection needs, while also mandating a vendor-validated deployment method. Which two steps are valid actions for a systems engineer to take? (Choose two.)

  • Recommend the customer purchase Palo Alto Networks or partner-provided professional services to meet the stated requirements.
  • Use Golden Images and Day 1 configuration to create a consistent baseline from which thecustomer can efficiently work.
  • Create a bespoke deployment plan with the customer that reviews their cloud architecture, store footprint, and security requirements.
  • Use the reference architecture "On-Premises Network Security for the Branch Deployment Guide" to achieve a desired architecture.

  Show Answer Answer: A, ,C Next