Instant Download PSE-SASE Dumps Q&As Provide PDF&Test Engine [Q30-Q51] : Top Exam Collection : http://blog.topexamcollection.com

FRAGE 30
Which element of Prisma Access enables both mobile users and users at branch networks to access resources in headquarters or a data center?

service connections

App-ID

private clouds

Benutzer-ID

FRAGE 31
Which two point products are consolidated into the Prisma secure access service edge (SASE) platform?
(Wählen Sie zwei aus.)

Autonomous Digital Experience Management (ADEM)

firewall as a service (FWaaS)

Threat Intelligence Platform (TIP)

security information and event management (SIEM)

FRAGE 32
How does the Palo Alto Networks secure access service edge (SASE) solution enable Zero Trust in a customer environment?

It stops attacks that use DNS for command and control or data theft.

It feeds threat intelligence into an automation engine for rapid and consistent protections.

It classifies sites based on content, features, and safety.

It continuously validates every stage of a digital interaction.

FRAGE 33
In an SD-WAN deployment, what allows customers to modify resources in an automated fashion instead of logging on to a central controller or using command-line interface (CLI) to manage all their configurations?

dynamic user group (DUG)

DNS server

application programming interface (API)

WildFire

FRAGE 34
What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?

Users, devices, and apps are identified no matter where they connect from.

Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.

Complexity of connecting to a gateway is increased, providing additional protection.

Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.

FRAGE 35
Which element of a secure access service edge (SASE)-enabled network uses many points of presence to reduce latency with support of in-country or in-region resources and regulatory requirements?

cloud-native, cloud-based delivery

converged WAN edge and network security

broad network-edge support

identity and network location

FRAGE 36
In which step of the Five-Step Methodology for implementing the Zero Trust model are the services most valuable to the company defined?

Step 2: Map the transaction flows

Step 4: Create the Zero Trust policy

Step 5: Monitor and maintain the network

Step 1: Define the protect surface

FRAGE 37
How does the secure access service edge (SASE) security model provide cost savings to organizations?

The single platform reduces costs compared to buying and managing multiple point products.

The compact size of the components involved reduces overhead costs, as less physical space is needed.

The content inspection integration allows third-party assessment, which reduces the cost of contract services.

The increased complexity of the model over previous products reduces IT team staffing costs.

FRAGE 38
Which type of access allows unmanaged endpoints to access secured on-premises applications?

manual external gateway

secure web gateway (SWG)

GlobalProtect VPN for remote access

Prisma Access Clientless VPN

FRAGE 39
Which product allows advanced Layer 7 inspection, access control, threat detection and prevention?

Infrastructure as a Service (IaaS)

remote browser isolation

network sandbox

Firewall as a Service (FWaaS)

FRAGE 40
In which step of the Five-Step Methodology of Zero Trust are application access and user access defined?

Step 4: Create the Zero Trust Policy

Step 3: Architect a Zero Trust Network

Step 1: Define the Protect Surface

Step 5: Monitor and Maintain the Network

FRAGE 41
How does Autonomous Digital Experience Management (ADEM) improve user experience?

The root cause of any alert can be viewed with a single click, allowing users to swiftly stop attacks across the environment.

The virtual appliance receives and stores firewall logs without using a local Log Collector, simplifying required steps users must take.

Working from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.

It applies in-depth hunting and forensics knowledge to identify and contain threats before they become a breach.

FRAGE 42
What are two ways service connections and remote network connections differ? (Choose two.)

Remote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.

Remote network connections enforce security policies, but service connections do not.

An on-premises resource cannot originate a connection to the internet over a service connection.

Service connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.

FRAGE 43
Which two prerequisites must an environment meet to onboard Prisma Access mobile users? (Choose two.)

Zoning must be configured to require a user ID for the mobile users trust zone.

Mapping of trust and untrust zones must be configured.

BGP must be configured so that service connection networks can be advertised to the mobile gateways.

Mobile user subnet and DNS portal name must be configured.

FRAGE 44
Which App Response Time metric is the measure of network latency?

Round Trip Time (RTT)

Server Response Time (SRT)

Network Transfer Time (NTTn)

UDP Response Time (UDP-TRT)

FRAGE 45
Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.
Which proxy should be used to decrypt this traffic?

SCP Proxy

SSL Inbound Proxy

SSH Forward Proxy

SSL Forward Proxy

FRAGE 46
Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?

>show sdwan connection all |

>show sdwan session distribution policy-name

>show sdwan path-monitor stats vif

>show sdwan event

FRAGE 47
Which connection method allows secure web gateway (SWG) access to internet-based SaaS applications using HTTP and HTTPS protocols?

GlobalProtect

Broker VM

explicit proxy

system-wide proxy

FRAGE 48
Which application gathers health telemetry about a device and its WiFi connectivity in order to help determine whether the device or the WiFi is the cause of any performance issues?

data loss prevention (DLP)

remote browser isolation (RBI)

Cortex Data Lake

GlobalProtect

FRAGE 49
In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access
1.8?

License bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.

License bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.

License bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.

License bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.

FRAGE 50
What is an advantage of next-generation SD-WAN over legacy SD-WAN solutions?

It enables definition of the privileges and responsibilities of administrative users in a network.

It allows configuration to forward logs to external logging destinations, such as syslog servers.

It steers traffic and defines networking and security policies from an application-centric perspective, rather than a packet-based approach.

It provides the ability to push common configurations, configuration updates, and software upgrades to all or a subset of the managed appliances.

FRAGE 51
In which step of the Five-Step Methodology for implementing the Zero Trust model does inspection and logging of all traffic take place?

Step 4: Create the Zero Trust policy

Step 3: Architect a Zero Trust network

Step 1: Define the protect surface

Step 5: Monitor and maintain the network