Palo Alto Networks PSE-Strata-Pro-24 Quiz 1 Topic 3 Questions 1-5

Question: 1

What are two methods that a NGFW uses to determine if submitted credentials are valid corporate credentials? (Choose two.)

AGroup mapping

BLDAP query

CDomain credential filter

DWMI client probing

Show Answer

Question: 2

In addition to Advanced DNS Security, which three Cloud-Delivered Security Services (CDSS) subscriptions utilize inline machine learning (ML)? (Choose three)

AEnterprise DLP

BAdvanced URL Filtering

CAdvanced WildFire

DAdvanced Threat Prevention

EIoT Security

EIoT Security
IoT Security is focused on discovering and managing IoT devices connected to the network. While this service uses machine learning for device behavior profiling and anomaly detection, it does not leverage inline machine learning for real-time traffic inspection. Instead, it operates at a more general level by providing visibility and identifying device risks.
Key Takeaways:
Enterprise DLP, Advanced URL Filtering, and Advanced Threat Prevention all rely on inline machine learning to provide real-time protection.
Advanced WildFire uses ML but not inline; its analysis is performed in the cloud.
IoT Security applies ML for device management rather than inline threat detection.

Show Answer

Question: 3

Which technique is an example of a DNS attack that Advanced DNS Security can detect and prevent?

AHigh entropy DNS domains

BPolymorphic DNS

CCNAME cloaking

DDNS domain rebranding

Show Answer

Question: 4

With Strata Cloud Manager (SCM) or Panorama, customers can monitor and manage which three solutions? (Choose three.)

APrisma Access

BPrisma Cloud

CCortex XSIAM

DNGFW

EPrisma SD-WAN

Show Answer

Question: 5

Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

AXML API

BCaptive portal

CUser-ID

DSCP log ingestion

Show Answer

Palo Alto Networks PSE-Strata-Pro-24 Quiz:1 Topic:3 Questions:1-5