PSE-Strata-Associate 試験問題を無料オンラインアクセス

A firewall enabled as a decryption broker will take which of the following actions?

• A.identify potential denial-of-service (DoS) attacks and take protective action
• B.monitor the state of active connections to determine which network packets to allow through
• C.forward clear text traffic to security chains for additional enforcement
• D.correlate a series of related threat events that indicate a likely compromised host on the network

A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.
How will the performance of the firewall be affected if the customer also enables both WildFire and User-ID?

• A.Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.
• B.Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.
• C.There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.
• D.The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.

Which three key functions are processed as part of the Palo Alto Networks single-pass architecture (SPA)?
(Choose three.)
Select 3 Correct Responses

• A.Virus-ID
• B.User-ID
• C.Intruder-ID
• D.Content-ID
• E.Device-ID

Which path will generate a stats dump file on a Palo Alto Networks Next-Generation Firewall (NGFW)?

• A.Device > Files > Generate Statsdump
• B.Device > Support > Generate Statsdump
• C.Device > Statsdump > Generate Statsdump
• D.Device > SLR > Generate Statsdump

Which subscription should be activated when a predefined, known malicious IP address is updated?

• A.WildFire
• B.Threat Prevention
• C.URL Filtering
• D.Cortex Data Lake