Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free Paloalto Networks PSE-Strata-Associate Practice Exam with Questions & Answers

Questions 1

Which two Cloud-Delivered Security Services (CDSS) would be appropriate for an organization that wants to secure internet traffic on a perimeter firewall? (Choose two.)

Select 2 Correct Responses

Options:
A.

WildFire

B.

Advanced URL Filtering (AURLF)

C.

Autonomous Digital Experience Management (ADEM)

D.

SD-WAN

Questions 2

Which section of a Security Lifecycle Review (SLR) report summarizes risk exposure by breaking down a detected attack on the network?

Options:
A.

Advanced URL Filtering Analysis

B.

SaaS Applications

C.

Threats at a Glance

D.

Applications that Introduce Risk

Questions 3

The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and

received from this website.

Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?

Options:
A.

Forward Proxy

B.

Web Proxy

C.

Certificate Proxy

D.

Inbound Proxy

Questions 4

Which of the following statements applies to enabling App-ID on a Next-Generation Firewall (NGFW)?

Options:
A.

No additional purchase is required, but App-ID must be enabled for the customer to use it.

B.

An App-ID subscription must be purchased and enabled.

C.

No configuration is required, because App-ID is always enabled by default.

D.

A Threat Protection license must be purchased and enabled.

Questions 5

Which of the following is an advantage of the Palo Alto Networks Next-Generation Firewall (NGFW)?

Options:
A.

Docker containers can be run on the hardware to add features.

B.

It identifies applications by port number and protocol.

C.

It is well positioned in the network to do more than provide access control.

D.

Customers can create their own mix of security vendor products.

Questions 6

An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.

Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses

Options:
A.

Layer 3

B.

TAP mode

C.

Virtual Wire

D.

Layer 2

Questions 7

Which three key functions are processed as part of the Palo Alto Networks single-pass architecture (SPA)? (Choose three.)

Select 3 Correct Responses

Options:
A.

User-ID

B.

Content-ID

C.

Intruder-ID

D.

Device-ID

E.

Virus-ID

Questions 8

Which three of the following are features of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.)

Select 3 Correct Responses

Options:
A.

Login-ID

B.

User-ID

C.

App-ID

D.

Network-ID

E.

SSL/SSH Decrypt

Questions 9

Using a comprehensive range of natively-integrated subscriptions and inline machine learning (ML), what does a Next-Generation Firewall (NGFW) use to prevent known and unknown threats in real time?

Options:
A.

Cloud Delivered Security Services (CDSS)

B.

Cloud Security Posture Management (CSPM)

C.

Cloud Native Security Platform (CNSP)

D.

Cloud Identity Access Management (CIAM)

Questions 10

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

Options:
A.

Layer 3 interface

B.

SLR interface

C.

virtual wire interface

D.

TAP interface

Certification Provider: Paloalto Networks
Exam Name: Palo Alto Networks Systems Engineer (PSE) - Strata Associate
Last Update: Jul 19, 2025
Questions: 35
PDF + Testing Engine
$164.99
$57.75
Testing Engine
$124.99
$43.75
PDF (Q&A)
$104.99
$36.75