Question 1

What are two benefits of the sinkhole Internet Protocol (IP) address that DNS Security sends to the client in place of malicious IP addresses? (Choose two.)

Options :

A : The client communicates with it instead of the malicious IP address

B : It represents the remediation server that the client should visit for patching

C : It will take over as the new DNS resolver for that client and prevent further DNS requests from occurring in the meantime

D : In situations where the internal DNS server is between the client and the firewall, it gives the firewall the ability to identify the clients who originated the query to the malicious domain

Answer: A,D

Question 2

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

Options :

A : It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

B : It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

C : It can automatically create address groups for use with KVM.

D : It can bootstrap the virtual firewalls for dynamic deployment scenarios.

Answer: A,D

Question 3

A customer requires protections and verdicts for portable executable (PE) and executable and linkable format (ELF), as well as the ability to integrate with existing security tools.

Which Cloud-Delivered Security Service (CDSS) does Palo Alto Networks provide that will address this requirement?

Options :

A : Dynamic Unpacking

B : WildFire

C : DNS Security

D : File Blocking profile

Answer: B

Question 4

What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)

Options :

A : Next-generation firewalls deployed with WildFire Analysis Security Profiles

B : WF-500 configured as private clouds for privacy concerns

C : Correlation Objects generated by AutoFocus

D : Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance

E : Palo Alto Networks non-firewall products such as Traps and Prisma SaaS

Answer: A,C,D

Question 5

In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)

Higher Test Marks with Free Online PSE-Strata Exam Practice

Buying Options: