PSE-Strata-Associate Practice Test

Which architecture allows a Palo Alto Networks Next-Generation Firewall (NGFW) to achieve high performance with all security features enabled?

A. single-pass parallel processing

B. dual-pass processing

C. multi-core processing

D. parallel-pass single processing

Which two of the following are benefits of the Palo Alto Networks Zero Trust architecture? (Choose two.)
Select 2 Correct Responses

A. tighter access control

B. increased detection of threats and infiltration

C. more network segments

D. cloud-based virtual private network (VPN)

A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.
How will the performance of the firewall be affected if the customer also enables both WildFire and User-ID?

A. The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.

B. Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.

C. There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.

D. Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.

A firewall enabled as a decryption broker will take which of the following actions?

A. forward clear text traffic to security chains for additional enforcement

B. monitor the state of active connections to determine which network packets to allow through

C. correlate a series of related threat events that indicate a likely compromised host on the network

D. identify potential denial-of-service (DoS) attacks and take protective action

Which traffic will be blocked when application-default service is set on a Security policy?

A. SSH traffic on TCP/22

B. HTTPS traffic on TCP/443

C. HTTP traffic on TCP/81

D. DNS traffic on UDP/53