Palo Alto Networks PSE-Strata Exam - Topic 1 Question 65 Discussion

Actual exam question for Palo Alto Networks's PSE-Strata exam

Question #: 65
Topic #: 1

A prospective customer currently uses a firewall that provides only Layer 4

inspection and protections. The customer sees traffic going to an external destination, port 53, but cannot determine what Layer 7 application traffic is going over that port

Which capability of PAN-OS would address the customer's lack of visibility?

ADevice ID, because it will give visibility into which devices are communicating with external destinations over port 53

Bsingle pass architecture (SPA), because it will improve the performance of the Palo Alto Networks Layer 7 inspection

CUser-ID, because it will allow the customer to see which users are sending traffic to external destinations over port 53

DApp-ID, because it will give visibility into what exact applications are being run over that port and allow the customer to block unsanctioned applications using port 53

Show Suggested Answer

Suggested Answer: D

by Kristofer at Mar 28, 2023, 08:55 AM

Limited Time Offer

25%

Off

Get Premium PSE-Strata Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bethanie

4 months ago

SPA is cool, but it won’t solve the visibility issue here.

upvoted 0 times

...

Graciela

4 months ago

Agreed, App-ID is the way to go for blocking those apps.

upvoted 0 times

...

Erick

4 months ago

Wait, can App-ID really see traffic on port 53? That’s surprising!

upvoted 0 times

...

Angella

4 months ago

I think User-ID could help too, but not as much as App-ID.

upvoted 0 times

...

Precious

4 months ago

Definitely App-ID! It’s the best for Layer 7 visibility.

upvoted 0 times

...

Horace

5 months ago

I thought Device ID was more about tracking devices rather than application visibility. I’m leaning towards App-ID, but I’m not completely confident.

upvoted 0 times

...

Clarinda

5 months ago

I practiced a similar question where App-ID was crucial for understanding traffic. I think it’s definitely the best choice for this scenario.

upvoted 0 times

...

Raylene

5 months ago

I’m not entirely sure, but I think User-ID might help with visibility into who is using the traffic, but it doesn’t really address the application itself, right?

upvoted 0 times

...