PSE-Strata-Associate Exam Dumps - Palo Alto Networks Systems Engineer (PSE) - Strata Associate

Go to page:

Question # 9

How does Cloud Identity Engine (CIE) simplify deployment of cloudbased services to provide user authentication?

It allows configuration of an authentication source once instead of for each authentication method.

It expands the capability to filter and forward decrypted and non-decrypted Transport Layer Security (TLS) traffic.

It ensures that a compromised master key does not compromise the configuration encryption for an entire deployment.

It authenticates users via a cloud-based service and refers to the hub for mappings for group identification.

Full Access

Question # 10

To use App-ID effectively in Security policies, which three best practices should be followed? (Choose three.)

Select 3 Correct Responses

Use Expedition to migrate a port-based policy to PAN-OS.

Whenever possible, enable App-ID override.

Use phased transition to safely enable applications.

Use Policy Optimizer to migrate to an application-based policy.

After the application is specified in policy, set the 7 service to "any".

Full Access

Go to page:

Hot Exams