Question 1

What are the three benefits of the Palo Alto Networks migration tool? (Choose three.)

AConversion of existing firewall policies to Palo Alto Networks NGFW policies

BAnalysis of existing firewall environment

CAssistance with the transition from POC to Production

DElimination of the need for consulting/professional services

EThe migration tool provides App-ID enhancements to improve Technical Support calls

Answer : A, B, C

Question 2

Which three policies or certificates must be configured for SSL Forward Proxy decryption? (Choose three.)

AForward trust certificate

BForward untrust certificate

CA decrypt port mirror policy

DInternal server certificate

EA decryption policy

Answer : A, B, E

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/decryption/keys-and-certificates-for-decryption-policies#_40372

Question 3

A customer is adopting Microsoft Office 365 but is concerned about the potential security exposure that such a move could mean. The security analyst suggests using Aperture and the Palo Alto Network firewall together to provide data and network security.

What are the two reasons this solution has been suggested? (Choose two.)

AThe firewall secures data in transit between the network and the cloud.

BAperture prevents users from using non-sanctioned SaaS applications.

CThe firewall scans data that resides in the cloud for malware.

DAperture scans data that resides in the cloud for sensitive information.

Answer : A, B

Question 4

What are three considerations when deploying User-ID. (Choose three.)

AEnable WMI probing in high security networks

BUser-ID can support a maximum of 15 hops.

CSpecify included and excluded networks when configuring User-ID

DUse a dedicated service account for User-ID services with the minimal permissions necessary.

EOnly enable User-ID on trusted zones

Answer : A, C, D

Question 5

A client chooses to not block uncategorized websites.

Which two additions should be made to help provide some protection? (Choose two.)

AA security policy rule using only known URL categories with the action set to allow

BA file blocking profile to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

CA URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

DA data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

Answer : A, C

Free Practice Questions for Palo Alto Networks PSE-Platform Exam

Question 1

Question 2

Question 3

Question 4

Question 5