PSE-STRATA-PRO-24 practice question 10 of 15

A systems engineer (SE) successfully demonstrates NGFW managed by Strata Cloud Manager (SCM) to a company. In the resulting planning phase of the…

A systems engineer (SE) successfully demonstrates NGFW managed by Strata Cloud Manager (SCM) to a company. In the resulting planning phase of the proof of value (POV), the CISO requests a test that shows how the security policies are either meeting, or are progressing toward meeting, industry standards such as Critical Security Controls (CSC), and how the company can verify that it is effectively utilizing the functionality purchased. During the POV testing timeline, how should the SE verify that the POV will meet the CISO's request?

Answer options

A: Near the end, pull a Security Lifecycle Review (SLR) in the POV and create a report for the customer. Correct answer

B: At the beginning, work with the customer to create custom dashboards and reports for any information required, so reports can be pulled as needed by the customer.

C: Near the end, the customer pulls information from these SCM dashboards: Best Practices, CDSS Adoption, and NGFW Feature Adoption.

D: At the beginning, use PANhandler golden images that are designed to align to compliance and to turning on the features for the CDSS subscription being tested.

Correct Answer:

A. Near the end, pull a Security Lifecycle Review (SLR) in the POV and create a report for the customer.

Explanation

The Security Lifecycle Review (SLR) report is the ideal tool to meet the CISO's request. Generated from the firewall's traffic logs during the proof of value (POV), the SLR provides a comprehensive analysis of application usage, content types, and threats observed on the network. It directly demonstrates the value of the NGFW and its security subscriptions by quantifying risks and showing how security policies can mitigate them. The report can be mapped to industry standards and highlights areas where security posture can be improved, directly addressing the CISO's requirements for verification and compliance progress.

Why Incorrect

B. Creating custom dashboards is labor-intensive and less comprehensive than the purpose-built SLR report for summarizing POV findings for an executive audience.
C. SCM dashboards are valuable for ongoing operational monitoring but are not designed to be the primary, consolidated report for a POV summary to a CISO.
D. Using PANhandler golden images is a deployment methodology for establishing a strong initial configuration, not a tool for reporting on the results of a POV.

References

1. Palo Alto Networks. (2024). Security Lifecycle Review (SLR). Palo Alto Networks TechDocs. Retrieved from https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/monitoring/view-and-manage-reports/security-lifecycle-review-slr. "The Security Lifecycle Review (SLR) report summarizes the business and security risks facing an organization." (Section: "Security Lifecycle Review (SLR)").

2. Palo Alto Networks. (n.d.). Security Lifecycle Review. Retrieved from https://www.paloaltonetworks.com/services/slr. "The SLR report examines your network traffic and provides a custom analysis of the applications, threats, and risks in your network." (Page overview).

Keep practicing

Take the free PSE-STRATA-PRO-24 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test