PSE-STRATA practice question 11 of 25
Which three actions should be taken before deploying a firewall evaluation unt in a customer environment? (Choose three.)
Full set: 139 questionsBefore deploying an evaluation unit, several key steps are crucial. The unit must be on the recommended firmware (C) to showcase current features and ensure stability. It must be factory reset (E) to purge any data from previous evaluations, ensuring data privacy and a clean configuration state. For a non-intrusive deployment like TAP mode, which is common for evaluations to generate a Security Lifecycle Review (SLR), the customer must provide a SPAN/mirror port (B) to supply the firewall with a copy of the network traffic for analysis.
A. Communication with Panorama is not a mandatory requirement for all evaluations; a firewall can be evaluated as a standalone device.
D. While setting expectations for the SLR is important, this option misrepresents the report by focusing on "personal user information," which can be anonymized. The other options are more critical technical prerequisites.
1. Palo Alto Networks. (2021). PAN-OS® Administrator’s Guide Version 10.1. "Configure Tap Interfaces" section. This section explains that Tap mode interfaces monitor traffic from a switch SPAN or mirror port.
2. Palo Alto Networks. (2023). Best Practices for PAN-OS® Software and Content Updates. Document discusses the importance of running the latest recommended software versions for security and stability.
3. Palo Alto Networks. (2021). PAN-OS® Administrator’s Guide Version 10.1. "Perform a Factory Reset" section. This guide details the procedure to revert the firewall to its initial state, a standard practice for redeployment.
Keep practicing
Take the free PSE-STRATA practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PSE-STRATA practice questions
- Question 1Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysi…
- Question 2Which four actions can be configured in an Anti-Spyware profile to address command-and-co…
- Question 3Which two types of security chains are supported by the Decryption Broker? (Choose two.)
- Question 4Which two features are key in preventing unknown targeted attacks? (Choose two)
- Question 5A company has deployed the following • VM-300 firewalls in AWS • endpoint protection with…
- Question 6Which Palo Alto Networks security component should an administrator use to and NGFW polic…
