Paloalto Networks PSE Strata Practice Exams
Last updated on Oct 21,2026- Exam Code: PSE Strata
- Exam Name: Palo Alto Networks System Engineer Professional - Strata
- Certification Provider: Paloalto Networks
- Latest update: Oct 21,2026
What are two advantages of the DNS Sinkholing feature? (Choose two.)
- A . It forges DNS replies to known malicious domains.
- B . It monitors DNS requests passively for malware domains.
- C . It can be deployed independently of an Anti-Spyware Profile.
- D . It can work upstream from the internal DNS server.
A customer requests that a known spyware threat signature be triggered based on a rate of
occurrence, for example, 10 hits in 5 seconds.
How is this goal accomplished?
- A . Create a custom spyware signature matching the known signature with the time attribute
- B . Add a correlation object that tracks the occurrences and triggers above the desired threshold
- C . Submit a request to Palo Alto Networks to change the behavior at the next update
- D . Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency
Which solution informs a customer concerned about zero-day targeted attacks whether an attack is specifically targeted at its property?
- A . AutoFocus
- B . Panorama Correlation Report
- C . Cortex XSOAR Community edition
- D . Cortex XDR Prevent
Access to a business site is blocked by URL Filtering inline machine learning (ML) and considered as a false-positive.
How should the site be made available?
- A . Disable URL Filtering inline ML
- B . Create a custom URL category and add it to the Security policy
- C . Create a custom URL category and add it on exception of the inline ML profile
- D . Change the action of real-time detection category on URL filtering profile
A service provider has acquired a pair of PA-7080s for its data center to secure its customer base’s traffic. The server provider’s traffic is largely generated by smart phones and averages 6.000,000 concurrent sessions.
Which Network Processing Card should be recommended in the Bill of Materials?
- A . PA-7000-20GQ-NPC
- B . PA-7000-40G-NPC
- C . PA-7000-20GQXM-NPC
- D . PA-7000-20G-NPC
What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?
- A . allow the request and all subsequent responses
- B . temporarily disable the DNS Security function
- C . block the query
- D . discard the request and all subsequent responses
A prospective customer currently uses a firewall that provides only Layer 4 inspection and protections. The customer sees traffic going to an external destination, port 53, but cannot determine what Layer 7 application traffic is going over that port.
Which capability of PAN-OS would address the customer’s lack of visibility?
- A . Device ID, because it will give visibility into which devices are communicating with external destinations over port 53
- B . single pass architecture (SPA), because it will improve the performance of the Palo Alto Networks Layer 7 inspection
- C . User-ID, because it will allow the customer to see which users are sending traffic to external destinations over port 53
- D . App-ID, because it will give visibility into what exact applications are being run over that port and allow the customer to block unsanctioned applications using port 53
Which task would be identified in Best Practice Assessment tool?
- A . identify the visibility and presence of command-and-control sessions
- B . identify sanctioned and unsanctioned SaaS applications
- C . identify the threats associated with each application
- D . identify and provide recommendations for device management access
In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)
- A . TXT
- B . API
- C . CSV
- D . EDL
Which two features can be enabled to support asymmetric routing with redundancy on a Palo Alto networks next-generation firewall (NGFW)? (Choose two.)
- A . Active / active high availability (HA)
- B . Multiple virtual systems
- C . non-SYN first packet
- D . Asymmetric routing profile