Question 1

The PAN-OS User-ID integrated agent is included with PAN-OS software and comes in which two forms? (Choose two.)

Accepted Answer

Correct answer: AC

Question 2

Which two statements correctly describe best practices for sizing a firewall deployment with decryption enabled? (Choose two.)

Accepted Answer

Correct answer: AC

Question 3

Which statement appropriately describes performance tuning Intrusion Prevention System (IPS) functions on a Palo Alto Networks NGFW running Advanced
Threat Prevention?

Accepted Answer

Correct answer: B

Question 4

A company has multiple business units, each of which manages its own user directories and identity providers (IdPs) with different domain names. The
company??s network security team wants to deploy a shared GlobalProtect remote access service for all business units to authenticate users to each business
unit's IdP.
Which configuration will enable the network security team to authenticate GlobalProtect users to multiple SAML IdPs?

Accepted Answer

Correct answer: A

Question 5

Which three known variables can assist with sizing an NGFW appliance? (Choose three.)

Accepted Answer

Correct answer: ABD

Question 6

A customer asks a systems engineer (SE) how Palo Alto Networks can claim it does not lose throughput performance as more Cloud-Delivered Security Services
(CDSS) subscriptions are enabled on the firewall.
Which two concepts should the SE explain to address the customer's concern? (Choose two.)

Accepted Answer

Correct answer: AC

Question 7

According to a customer??s CIO, who is upgrading PAN-OS versions, ??Finding issues and then engaging with your support people requires expertise that our
operations team can better utilize elsewhere on more valuable tasks for the business.?? The upgrade project was initiated in a rush because the company did not
have the appropriate tools to indicate that their current NGFWs werereaching capacity.
Which two actions by the Palo Alto Networks team offer a long-term solution for the customer? (Choose two.)

/PSE-Strata-Pro-24-exam/ (60 Q&As)

Accepted Answer

Correct answer: BD

Question 8

As a team plans for a meeting with a new customer in one week, the account manager prepares to pitch Zero Trust. The notes provided to the systems engineer
(SE) in preparationfor the meeting read: "Customer is struggling with security as they move to cloud apps and remote users." What should the SE recommend to
the team in preparation for the meeting?

Accepted Answer

Correct answer: B

Question 9

Which two compliance frameworks are included with the Premium version of Strata Cloud Manager (SCM)? (Choose two)

Accepted Answer

Correct answer: AB

Question 10

Which action can help alleviate a prospective customer's concerns about transitioning from a legacy firewall with port-based policies to a Palo Alto Networks
NGFW with application-based policies?

Accepted Answer

Correct answer: A