PSE-SASE Online Practice Questions and Answers

Which product draws on data collected through PAN-OS device telemetry to provide an overview of the health of an organization's next-generation firewall (NGFW) deployment and identify areas for improvement?

A. Cloud Identity Engine (CIE)

B. DNS Security

C. security information and event management (SIEM)

D. Device Insights

Which product leverages GlobalProtect agents for endpoint visibility and native Prisma SD- WAN integration for remote sites and branches?

A. Cloud-Delivered Security Services (CDSS)

B. WildFire

C. CloudBlades:

D. Autonomous Digital Experience Management (ADEM)

How does a secure web gateway (SWG) protect users from web-based threats while still enforcing corporate acceptable use policies?

A. Users are mapped via server logs for login events and syslog messages from authenticating services.

B. It uses a cloud-based machine learning (ML)-powered web security engine to perform ML-based inspection of web traffic in real-time.

C. It prompts the browser to present a valid client certificate to authenticate the user.

D. Users access the SWG, which then connects the user to the website while still performing security measures.

In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access 1.8?

A. License bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.

B. License bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.

C. License bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.

D. License bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.

What is an advantage of the Palo Alto Networks cloud-based security infrastructure?

A. It provides comprehensive, scalable cloud security with flexible licensing options.

B. It backhauls traffic to the corporate network.

C. It allows for the elimination of data centers within five years of implementation.

D. It increases the footprint of the security solution.

How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?

A. It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.

B. It offers risk scoring, analytics, reporting, and Security policy rule authoring.

C. It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.

D. It prevents credential theft by controlling sites to which users can submit their corporate credentials.

In which step of the Five-Step Methodology for implementing the Zero Trust model is the Kipling Method relevant?

A. Step 3: Architect a Zero Trust network

B. Step 5: Monitor and maintain the network

C. Step 4: Create the Zero Trust policy

D. Step 2: Map the transaction flows

Which App Response Time metric measures the amount of time it takes to transfer incoming data from an external server to a local client?

A. UDP Response Time (UDP-TRT)

B. Server Response Time (SRT)

C. Network Transfer Time (NTTn)

D. Round Trip Time (RTT)

Which App Response Time metric is the measure of network latency?

A. Round Trip Time (RTT)

B. Server Response Time (SRT)

C. Network Transfer Time (NTTn)

D. UDP Response Time (UDP-TRT)

How does Autonomous Digital Experience Management (ADEM) improve user experience?

A. The root cause of any alert can be viewed with a single click, allowing users to swiftly stop attacks across the environment.

B. The virtual appliance receives and stores firewall logs without using a local Log Collector, simplifying required steps users must take.

C. Working from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.

D. It applies in-depth hunting and forensics knowledge to identify and contain threats before they become a breach.