PSE-SASE Pre-Exam Practice Tests | (Updated 67 Questions)
Valid PSE-SASE Exam Q&A PDF - One Year Free Update
NEW QUESTION # 15
How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?
- A. Users are mapped via server logs for login events and syslog messages from authenticating services.
- B. It prompts the browser to present a valid client certificate to authenticate the user.
- C. Users access the SWG, which then connects the user to the website while still performing security measures.
- D. It uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.
Answer: C
NEW QUESTION # 16
Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?
- A. >show sdwan path-monitor stats vif
- B. >show sdwan session distribution policy-name
- C. >show sdwan connection all |
- D. >show sdwan event
Answer: D
NEW QUESTION # 17
Which product leverages GlobalProtect agents for endpoint visibility and native Prisma SD-WAN integration for remote sites and branches?
- A. Autonomous Digital Experience Management (ADEM)
- B. Cloud-Delivered Security Services (CDSS)
- C. CloudBlades:
- D. WildFire
Answer: B
NEW QUESTION # 18
Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.
Which proxy should be used to decrypt this traffic?
- A. SSL Inbound Proxy
- B. SSL Forward Proxy
- C. SSH Forward Proxy
- D. SCP Proxy
Answer: A
NEW QUESTION # 19
What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?
- A. Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.
- B. Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.
- C. Complexity of connecting to a gateway is increased, providing additional protection.
- D. Users, devices, and apps are identified no matter where they connect from.
Answer: D
NEW QUESTION # 20
Which two point products are consolidated into the Prisma secure access service edge (SASE) platform?
(Choose two.)
- A. Threat Intelligence Platform (TIP)
- B. firewall as a service (FWaaS)
- C. Autonomous Digital Experience Management (ADEM)
- D. security information and event management (SIEM)
Answer: B,C
NEW QUESTION # 21
Which secure access service edge (SASE) networking component inspects web-based protocols and traffic to securely connect users to applications?
- A. secure web gateway (SWG)
- B. proxy
- C. SD-WAN
- D. cloud access security broker (CASB)
Answer: A
NEW QUESTION # 22
Which product continuously monitors each segment from the endpoint to the application and identifies baseline metrics for each application?
- A. CloudBlades
- B. App-ID Cloud Engine (ACE)
- C. Autonomous Digital Experience Management (ADEM)
- D. WildFire
Answer: C
NEW QUESTION # 23
How does Autonomous Digital Experience Management (ADEM) improve user experience?
- A. The virtual appliance receives and stores firewall logs without using a local Log Collector, simplifying required steps users must take.
- B. Working from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.
- C. It applies in-depth hunting and forensics knowledge to identify and contain threats before they become a breach.
- D. The root cause of any alert can be viewed with a single click, allowing users to swiftly stop attacks across the environment.
Answer: B
NEW QUESTION # 24
What is feature of Autonomous Digital Experience Management (ADEM)?
- A. It natively ingests, normalizes, and integrates granular data across the security infrastructure at nearly half the cost of legacy security products attempting to solve the problem.
- B. It provides IT teams with single-pane visibility that leverages endpoint, simulated, and real-time user traffic data to provide the most complete picture of user traffic flows possible.
- C. It applies configuration changes and provides credential management, role-based controls, and a playbook repository.
- D. It provides customized forms to collect and validate necessary parameters from the requester.
Answer: B
NEW QUESTION # 25
Which two key benefits have been identified for a customer investing in the Palo Alto Networks Prisma secure access service edge (SASE) solution? (Choose two.)
- A. decreased likelihood of a data breach
- B. reduced input required from management during third-party investigations
- C. reduced number of security incidents requiring manual investigation
- D. decreased need for interaction between branches
Answer: B,C
NEW QUESTION # 26
What is a benefit of the Palo Alto Networks secure access service edge (SASE) solution's ability to provide insight into SD-WAN and network security metrics while highlighting critical issues across all managed tenants?
- A. It helps protect inbound, outbound, and east-west traffic between container workload types in Kubernetes environments without slowing development speed.
- B. It rearchitects the way signatures are delivered, performing updates and streaming them to the firewall within seconds after the analysis is done.
- C. It simplifies workflows and instantly automates common use cases with hundreds of prebuilt playbooks.
- D. It helps managed service providers (MSPs) accelerate troubleshooting and meet service level agreements (SLAs) for all their customers.
Answer: D
NEW QUESTION # 27
What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices?
(Choose two.)
- A. network controller communication and monitoring
- B. local area network (LAN) Dynamic Host Configuration Protocol (DHCP) and DHCP relay functionality
- C. control mode insertion without modification of existing network configuration
- D. ensures automatic failover when ION devices experience software or network related failure
Answer: D
NEW QUESTION # 28
Which three decryption methods are available in a security processing node (SPN)? (Choose three.)
- A. SSL Inbound Inspection
- B. SSHv2 Proxy
- C. SSL Forward Proxy
- D. SSH Inbound Inspection
- E. SSL Outbound Proxy
Answer: A,B,C
NEW QUESTION # 29
How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?
- A. It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.
- B. It prevents credential theft by controlling sites to which users can submit their corporate credentials.
- C. It offers risk scoring, analytics, reporting, and Security policy rule authoring.
- D. It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.
Answer: D
NEW QUESTION # 30
What can prevent users from unknowingly downloading potentially malicious file types from the internet?
- A. Apply a Zone Protection profile to the untrust zone.
- B. Apply a File Blocking profile to Security policy rules that allow general web access.
- C. Assign an Antivirus profile to Security policy rules that deny general web access.
- D. Assign a Vulnerability profile to Security policy rules that deny general web access.
Answer: B
NEW QUESTION # 31
......
Palo Alto Networks Accredited Systems Engineer (PSE) - SASE Professional Free Update Certification Sample Questions: https://www.dumpsreview.com/PSE-SASE-exam-dumps-review.html
Trend for Palo Alto Networks PSE-SASE pdf dumps before actual exam: https://drive.google.com/open?id=1LVZiLG7MgqOcTNk_LrxvTn0uTyv865Zx
