PSE-Strata-Pro-24 試験問題を無料オンラインアクセス

A customer asks a systems engineer (SE) how Palo Alto Networks can claim it does not lose throughput performance as more Cloud-Delivered Security Services (CDSS) subscriptions are enabled on the firewall.
Which two concepts should the SE explain to address the customer's concern? (Choose two.)

• A.Management Data Plane Separation
• B.Parallel Processing
• C.Single Pass Architecture
• D.Advanced Routing Engine

A prospective customer wants to validate an NGFW solution and seeks the advice of a systems engineer (SE) regarding a design to meet the following stated requirements:
"We need an NGFW that can handle 72 Gbps inside of our core network. Our core switches only have up to
40 Gbps links available to which new devices can connect. We cannot change the IP address structure of the environment, and we need protection for threat prevention, DNS, and perhaps sandboxing." Which hardware and architecture/design recommendations should the SE make?

• A.PA-5445 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-2 or virtual wire mode that include 2 x 40Gbps interfaces on both sides of the path.
• B.PA-5430 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-2 or virtual wire mode that include 2 x 40Gbps interfaces on both sides of the path.
• C.PA-5430 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-3 mode that include 40Gbps interfaces on both sides of the path.
• D.PA-5445 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-3 mode that include 40Gbps interfaces on both sides of the path.

A customer sees unusually high DNS traffic to an unfamiliar IP address. Which Palo Alto Networks Cloud-Delivered Security Services (CDSS) subscription should be enabled to further inspect this traffic?

• A.Advanced WildFire
• B.Advanced URL Filtering
• C.Advanced Threat Prevention
• D.Advanced DNS Security

With Strata Cloud Manager (SCM) or Panorama, customers can monitor and manage which three solutions?
(Choose three.)

• A.Prisma SD-WAN
• B.Cortex XSIAM
• C.Prisma Cloud
• D.NGFW
• E.Prisma Access

A company has multiple business units, each of which manages its own user directories and identity providers (IdPs) with different domain names. The company's network security team wants to deploy a shared GlobalProtect remote access service for all business units to authenticate users to each business unit's IdP.
Which configuration will enable the network security team to authenticate GlobalProtect users to multiple SAML IdPs?

• A.Multiple authentication mode Cloud Identity Engine authentication profile for use on the GlobalProtect portals and gateways
• B.Multiple Cloud Identity Engine tenants for each business unit
• C.GlobalProtect with multiple authentication profiles for each SAML IdP
• D.Authentication sequence that has multiple authentication profiles using different authentication methods