Palo Alto Networks Security Service Edge Engineer - SSE-Engineer Free Exam Questions

A. icmp ping

B. udp ping

C. tcp ping

D. https ping

A. Create a custom role to merge devices with the same hostname and operating system.

B. Merge individual devices into a single device with multiple interfaces.

C. Add the duplicate entries to the ignore list in IoT Security.

D. Delete all duplicate devices, keeping only those discovered using their management IP addresses.

A. The GlobalProtect agent may be used to distribute pre-logon certificates.

B. Certificates must be deployed in the Machine Certificate Store.

C. The certificate used for pre-logon must include both Subject and Subject-Alt fields.

D. A public certificate authority (CA) must sign and validate all certificates used.

A. Secret

B. Peer AS Number

C. Advertise Default Route Checkbox

D. MRAI Timers

A. The threat protection profile will override the 'Disable Server Response Inspection1 only for HTTP traffic from the server to the client.

B. Only HTTP traffic from the server to the client will bypass threat inspection.

C. All traffic from the server to the client will bypass threat inspection.

D. The threat protection profile will override the 'Disable Server Response Inspection1 for all traffic from the server to the client.

A. Configure an auto tagging rule in SCM to trigger a Security policy review workflow based on a security rule tag, then instruct junior engineers to use this tag for all new Security policies.

B. Run a Best Practice Assessment (BPA) at regular intervals and manually revert any policies not meeting company compliance standards.

C. Use security checks under posture settings and set the action to "deny" for all checks that do not meet the compliance standards.

D. Configure role-based access controls (RBACs) for all junior engineers to limit them to creating policies in a disabled state, manually review the policies, and enable them using a senior engineer role.