Updated Palo Alto Networks PSE-Platform Exam Dumps

Question No: 1

MultipleChoice

A price sensitive customer wants to prevent attacks on a windows 2008 Virtual Server. The server will max out at 100Mbps but needs to have 45,000 sessions to connect to multiple hosts within a data center

Which VM instance should be used to secure the network by this customer?

Options

AVM-200

BVM-100

CVM-300

DVM-50

Question No: 2

MultipleChoice

Palo Alto Networks publishes updated Command and Control signatures.

How frequently should the related signatures schedule be set?

Options

AOnce an hour

BOnce every minute

COnce a week

DOnce a day

Question No: 3

MultipleChoice

Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

Options

ACreate an anti-spyware profile to block all spyware

BCreate a vulnerability protection profile to block all the vulnerabilities with severity low and higher

CCreate an SSL Decryption policy to decrypt 100% of the traffic

DCreate an antivirus profile to block all content that matches and antivirus signature

ECreate a WildFire profile to schedule file uploads during low network usage windows

Question No: 4

MultipleChoice

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer’s requirements? (Choose two.)

Options

AVirtual systems

BHA active/active

CPolicy-based forwarding

DHA active/passive

Question No: 5

MultipleChoice

Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

Options

AClient Probing

BTACACS

CeDirectory monitoring

DSNMP server

ELotus Domino

FRADIUS

GActive Directory monitoring

Question No: 6

MultipleChoice

A customer is worried about unknown attacks, but due to privacy and regulatory issues, won't implement SSL decrypt.

How can the platform still address this customer's concern?

Options

AIt pivots the conversation to Traps on the endpoint preventing unknown exploits and malware there instead.

BIt bypasses the need to decrypt SSL Traffic by analyzing the file while still encrypted.

CIt shows how AutoFocus can provide visibility into targeted attacks at the industry sector.

DIt overcomes reservations about SSL decrypt by offloading to a higher capacity firewall to help with the decrypt throughput.

Question No: 7

MultipleChoice

Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

Options

AAllow

BDrop

CQuarantine

DRedirect

EAlert

FReset

Question No: 8

MultipleChoice

A client chooses to not block uncategorized websites.

Which two additions should be made to help provide some protection? (Choose two.)

Options

AA security policy rule using only known URL categories with the action set to allow

BA file blocking profile to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

CA URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

DA data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

Question No: 9

MultipleChoice

Which three signature-based Threat Prevention features of the firewall are informed by intelligence from the Threat Intelligence Cloud? (Choose three.)

Options

AVulnerability protection

BAnti-Spyware

CAnti-Virus

DBotnet detection

EApp-ID protection

Question No: 10

MultipleChoice

Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

Options

APE file upload to WildFire

BWildFire hybrid deployment

C5 minute WildFire updates to threat signatures

DAccess to the WildFire API

Question No: 11

MultipleChoice

Which configuration creates the most comprehensive ''best-practice'' Anti Spyware profile to prevent command and Control traffic?

Options

AClone the Strict Anti-Spyware Profile, enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

BClone the Default Anti-Spyware Profile and enable DNS Sinkholing and Passive DNS Monitoring, and deploy this customized clone

CEdit and deploy the Default Anti-Spyware Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

DEdit and deploy the Strict Anti-Spyware Profile Profile (DNS Sinkholing and Passive DNS Monitoring is already enabled)

Question No: 12

MultipleChoice

Which profile or policy should be applied to protect against port scans from the internet?

Options

AAn App-ID security policy rule to block traffic sourcing from the untrust zone

BSecurity profiles to security policy rules for traffic sourcing from the untrust zone

CInterface management profile on the zone of the ingress interface

DZone protection profile on the zone of the ingress interface

Free Palo Alto Networks PSE-Platform Exam Dumps May 2026