Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Paloalto Networks PSE-SASE Practice Exam with Questions & Answers | Set: 2

Questions 11

How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?

Options:
A.

Enable syslog on the Instant-On Network (ION) device.

B.

Use a zone-based firewall to export directly through application program interface (API) to the SIEM.

C.

Enable Simple Network Management Protocol (SNMP) on the Instant-On Network (ION) device.

D.

Use the centralized flow data-export tool built into the controller.

Questions 12

In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access 1.8?

Options:
A.

License bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.

B.

License bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.

C.

License bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.

D.

License bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.

Questions 13

How does the Palo Alto Networks secure access service edge (SASE) solution enable Zero Trust in a customer environment?

Options:
A.

It stops attacks that use DNS for command and control or data theft.

B.

It feeds threat intelligence into an automation engine for rapid and consistent protections.

C.

It classifies sites based on content, features, and safety.

D.

It continuously validates every stage of a digital interaction.

Questions 14

Which product allows advanced Layer 7 inspection, access control, threat detection and prevention?

Options:
A.

Infrastructure as a Service (IaaS)

B.

remote browser isolation

C.

network sandbox

D.

Firewall as a Service (FWaaS)

Questions 15

Which two actions take place after Prisma SD-WAN Instant-On Network (ION) devices have been deployed at a site? (Choose two.)

Options:
A.

The devices continually sync the information from directories, whether they are on-premise, cloud-based, or hybrid.

B.

The devices establish VPNs over private WAN circuits that share a common service provider.

C.

The devices automatically establish a VPN to the data centers over every internet circuit.

D.

The devices provide an abstraction layer between the Prisma SD-WAN controller and a particular cloud service.

Questions 16

Which two services are provided by Prisma Access Insights? (Choose two.)

Options:
A.

summary overview screen of the health and performance of an organization's entire Prisma Access environment

B.

configuration of the on-premises firewall located behind the service-connection termination

C.

detection of hard-to-find security issues via AI-based innovations to normalize, analyze, and stitch together an enterprise's data

D.

multiple dashboards for focused views of different deployments, the corresponding alerts, and the health status of the infrastructure

Questions 17

Which application gathers health telemetry about a device and its WiFi connectivity in order to help determine whether the device or the WiFi is the cause of any performance issues?

Options:
A.

data loss prevention (DLP)

B.

remote browser isolation (RBI)

C.

Cortex Data Lake

D.

GlobalProtect

Questions 18

Which product continuously monitors each segment from the endpoint to the application and identifies baseline metrics for each application?

Options:
A.

App-ID Cloud Engine (ACE)

B.

Autonomous Digital Experience Management (ADEM)

C.

CloudBlades

D.

WildFire

Questions 19

What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices? (Choose two.)

Options:
A.

local area network (LAN) Dynamic Host Configuration Protocol (DHCP) and DHCP relay functionality

B.

control mode insertion without modification of existing network configuration

C.

network controller communication and monitoring

D.

ensures automatic failover when ION devices experience software or network related failure

Exam Code: PSE-SASE
Certification Provider: Paloalto Networks
Exam Name: Palo Alto Networks System Engineer Professional - SASE Exam
Last Update: Jul 10, 2025
Questions: 65