Palo Alto Networks Systems Engineer (PSE) - Strata Associate Sample Questions:

1. Which architecture allows a Palo Alto Networks Next-Generation Firewall (NGFW) to achieve high performance with all security features enabled?

A) parallel-pass single processing
B) single-pass parallel processing
C) dual-pass processing
D) multi-core processing

2. Which deployment method is used to integrate a firewall to be inline in an existing network but does not support additional routing or switching?

A) virtual wire
B) Layer 3
C) Layer 2
D) TAP mode

3. Which two Cloud-Delivered Security Services (CDSS) would be appropriate for an organization that wants to secure internet traffic on a perimeter firewall? (Choose two.) Select 2 Correct Responses

A) Autonomous Digital Experience Management (ADEM)
B) Advanced URL Filtering (AURLF)
C) SD-WAN
D) WildFire

4. To use App-ID effectively in Security policies, which three best practices should be followed? (Choose three.) Select 3 Correct Responses

A) Use Policy Optimizer to migrate to an application-based policy.
B) Use phased transition to safely enable applications.
C) Whenever possible, enable App-ID override.
D) Use Expedition to migrate a port-based policy to PAN-OS.
E) After the application is specified in policy, set the 7 service to "any".

Solutions: