Question 1

A customer asks a systems engineer (SE) how Palo Alto Networks can claim it does not lose throughput performance as more Cloud-Delivered Security Services (CDSS) subscriptions are enabled on the firewall. Which two concepts should the SE explain to address the customer's concern? (Choose two.)

Options :

A : Parallel Processing

B : Advanced Routing Engine

C : Single Pass Architecture

D : Management Data Plane Separation

Answer: C,D

Question 2

According to a customers CIO, who is upgrading PAN-OS versions, œFinding issues and then engaging with your support people requires expertise that our operations team can better utilize elsewhere on more valuable tasks for the business. The upgrade project was initiated in a rush because the company did not have the appropriate tools to indicate that their current NGFWs were reaching capacity. Which two actions by the Palo Alto Networks team offer a long-term solution for the customer? (Choose two.)

Options :

A :

Recommend that the operations team use the free machine learning-powered AIOps for NGFW tool.

B :

Suggest the inclusion of training into the proposal so that the operations team is informed and confident in working on their firewalls.

C :

Inform the CIO that the new enhanced security features they will gain from the PAN-OS upgrades will fix any future problems with upgrading and capacity.

D :

Propose AIOps Premium within Strata Cloud Manager (SCM) to address the companys issues from within the existing technology.

Answer: A,D

Question 3

Which two actions can a systems engineer take to discover how Palo Alto Networks can bring value to a customer's business when they show interest in adopting Zero Trust? (Choose two.)

Options :

A :

Ask the customer about their internal business flows, such as how their users interact with applications and data across the infrastructure.

B :

Explain how Palo Alto Networks can place virtual NGFWs across the customer-s network to ensure assets and traffic are seen and controlled.

C :

Use the Zero Trust Roadshow package to demonstrate to the customer how robust Palo Alto Networks capabilities are in meeting Zero Trust.

D :

Ask the customer about their approach to Zero Trust, explaining that it is a strategy more than it is something they purchase.

Answer: A,D

Question 4

A large global company plans to acquire 500 NGFWs to replace its legacy firewalls and has a specific requirement for centralized logging and reporting capabilities. What should a systems engineer recommend?

Options :

A :

Combine Panorama for firewall management with Palo Alto Networks' cloud-based Strata Logging Service to offer scalability for the company-s logging and reporting infrastructure.

B :

Use Panorama for firewall management and to transfer logs from the 500 firewalls directly to a third-party SIEM for centralized logging and reporting.

C :

Highlight the efficiency of PAN-OS, which employs AI to automatically extract critical logs and generate daily executive reports, and confirm that the purchase of 500 NGFWs is sufficient.

D :

Deploy a pair of M-1000 log collectors in the customer data center, and route logs from all 500 firewalls to the log collectors for centralized logging and reporting.

Answer: A

Question 5

Which statement appropriately describes performance tuning Intrusion Prevention System (IPS) functions on a Palo Alto Networks NGFW running Advanced Threat Prevention?

Options :

A : Leave all signatures turned on because they do not impact performance.

B : Create a new threat profile to use only signatures needed for the environment.

C :

Work with TAC to run a debug and receive exact measurements of performance utilization for the IPS.

D : To increase performance, disable any threat signatures that do not apply to the environment.

Answer: B

Smartly Prepare Exam with Free Online PSE-Strata-Pro-24 Practice Test

Buying Options: