PSE-STRATA practice question 11 of 25

Which three actions should be taken before deploying a firewall evaluation unt in a customer environment? (Choose three.)

Full set: 139 questions
Answer options
A: Request that the customer make part 3978 available to allow the evaluation unit to communicate with Panorama
B: Inform the customer that a SPAN port must be provided for the evaluation unit, assuming a TAP mode deployment. Correct answer
C: Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned. Correct answer
D: Set expectations for information being presented in the Security Lifecycle Review (SLR) because personal user information will be made visible
E: Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed Correct answer
Correct Answer:
B. Inform the customer that a SPAN port must be provided for the evaluation unit, assuming a TAP mode deployment.; C. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.; E. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed
Explanation

Before deploying an evaluation unit, several key steps are crucial. The unit must be on the recommended firmware (C) to showcase current features and ensure stability. It must be factory reset (E) to purge any data from previous evaluations, ensuring data privacy and a clean configuration state. For a non-intrusive deployment like TAP mode, which is common for evaluations to generate a Security Lifecycle Review (SLR), the customer must provide a SPAN/mirror port (B) to supply the firewall with a copy of the network traffic for analysis.

Why Incorrect

A. Communication with Panorama is not a mandatory requirement for all evaluations; a firewall can be evaluated as a standalone device.
D. While setting expectations for the SLR is important, this option misrepresents the report by focusing on "personal user information," which can be anonymized. The other options are more critical technical prerequisites.

References

1. Palo Alto Networks. (2021). PAN-OS® Administrator’s Guide Version 10.1. "Configure Tap Interfaces" section. This section explains that Tap mode interfaces monitor traffic from a switch SPAN or mirror port.

2. Palo Alto Networks. (2023). Best Practices for PAN-OS® Software and Content Updates. Document discusses the importance of running the latest recommended software versions for security and stability.

3. Palo Alto Networks. (2021). PAN-OS® Administrator’s Guide Version 10.1. "Perform a Factory Reset" section. This guide details the procedure to revert the firewall to its initial state, a standard practice for redeployment.

Scroll to Top