[Nov-2023] Palo Alto Networks PSE-Strata Actual Questions and Braindumps [Q85-Q109]

QUESTION 85
The Palo Ao Networks Cloud Identity Engino (CIE) includes which service that supports identity Providers (ldP)?

QUESTION 86
Which two products can send logs to the Cortex Data Lake? (Choose two.)

QUESTION 87
Match the functions to the appropriate processing engine within the dataplane.

QUESTION 88
A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types.
The customer uses a firewall with User-ID enabled
Which feature must also be enabled to prevent these attacks?

QUESTION 89
How do Highly Suspicious artifacts in-AutoFocus help identify when an unknown, potential zero- day, targeted attack occur to allow one to adjust the security posture?

QUESTION 90
Which three activities can the botnet report track? (Choose three.)

QUESTION 91
Which three new script types can be analyzed in WildFire? (Choose three.)

QUESTION 92
A packet that is already associated with a current session arrives at the firewall. What is the flow of the packet after the firewall determines that it is matched with an existing session?

QUESTION 93
Drag and Drop Question
Match the functions to the appropriate processing engine within the dataplane.

QUESTION 94
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

QUESTION 95
Which two types of security chains are supported by the Decryption Broker? (Choose two.)

QUESTION 96
What are three best practices for running an Ultimate Test Drive (UTD)? (Choose three.)

QUESTION 97
Which decryption requirement ensures that inspection can be provided to all inbound traffic routed to internal application and database servers?

QUESTION 98
A customer is worried about unknown attacks, but due to privacy and regulatory issues, won’t implement SSL decrypt.
How can the platform still address this customer’s concern?

QUESTION 99
Which two configuration elements can be used to prevent abuse of stolen credentials? (Choose two.)

QUESTION 100
Which three mechanisms are valid for enabling user mapping? (Choose three.)

QUESTION 101
What are two advantages of the DNS Sinkholing feature? (Choose two.)

QUESTION 102
If a Palo Alto Networks Next-Generation Firewall (NGFW) already has Advanced Threat Prevention (ATP) enabled what is the throughput impact of also enabling Wildfire and Advanced URL Filtering (AURLF)?

QUESTION 103
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)

QUESTION 104
Which security profile on the NGFW includes signatures to protect you from brute force attacks?

QUESTION 105
Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

QUESTION 106
What is the basis for purchasing Cortex XDR licensing?

QUESTION 107
What are two benefits of the sinkhole Internet Protocol (IP) address that DNS Security sends to the client in place of malicious IP addresses? (Choose two.)

QUESTION 108
DNS sinkholing helps identify infected hosts on the protected network using DNS traffic in situations where the firewall cannot see the infected client’s DNS query (that is, the firewall cannot see the originator of DNS query) Which of the following Statements is true?

QUESTION 109
A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.
Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?