Palo Alto Networks System Engineer Professional - SASE

Here you have the best Palo Alto Networks PSE-SASE practice exam questions

You have 124 total questions to study from
Each page has 5 questions, making a total of 25 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on January 28, 2026
This site is not affiliated with or endorsed by Palo Alto Networks.

Question 1 of 124

A customer currently uses a third-party proxy solution for client endpoints and would like to migrate to Prisma Access to secure mobile user internet-bound traffic.
Which recommendation should the Systems Engineer make to this customer?

With the explicit proxy license add-on, set up GlobalProtect.

With the mobile user license, set up explicit proxy.

With the explicit proxy license, set up a service connection.

With the mobile user license, set up a corporate access node.

Correct Answer: B

To secure mobile user internet-bound traffic using Prisma Access, the customer should set up an explicit proxy with the mobile user license. This configuration allows Prisma Access to handle and secure the internet traffic from mobile endpoints effectively.

Question 2 of 124

What is a benefit of deploying secure access service edge (SASE) with a secure web gateway (SWG) over a SASE solution without a SWG?

A heartbeat connection between the firewall peers ensures seamless failover in the event that a peer goes down.

It prepares the keys and certificates required for decryption, creating decryption profiles and policies, and configuring decryption port mirroring.

Protection is offered in the cloud through a unified platform for complete visibility and precise control over web access while enforcing security policies that protect users from hostile websites.

It creates tunnels that allow users and systems to connect securely over a public network as if they were connecting over a local area network (LAN).

Correct Answer: C

Deploying secure access service edge (SASE) with a secure web gateway (SWG) offers protection in the cloud through a unified platform for complete visibility and precise control over web access. This approach enforces security policies to protect users from hostile websites, which enhances the security measures provided by a SASE solution without an SWG.

Question 3 of 124

Which action protects against port scans from the internet?

Apply App-ID Security policy rules to block traffic sourcing from the untrust zone.

Assign Security profiles to Security policy rules for traffic sourcing from the untrust zone.

Apply a Zone Protection profile on the zone of the ingress interface.

Assign an Interface Management profile to the zone of the ingress surface.

Correct Answer: C

Applying a Zone Protection profile on the zone of the ingress interface is a comprehensive action that protects against a variety of network threats, including port scans from the internet. Zone Protection profiles allow for protection against floods, reconnaissance, and other attack types, making it effective in securing against port scans.

Question 4 of 124

Which product continuously monitors each segment from the endpoint to the application and identifies baseline metrics for each application?

App-ID Cloud Engine (ACE)

Autonomous Digital Experience Management (ADEM)

CloudBlades

WildFire

Correct Answer: B

Autonomous Digital Experience Management (ADEM) is the product that continuously monitors each segment from the endpoint to the application and identifies baseline metrics for each application. This system provides a comprehensive view of the digital experience by analyzing every part of the connection, ensuring optimal performance and identifying any issues that may arise in the network.

Question 5 of 124

Which application gathers health telemetry about a device and its WiFi connectivity in order to help determine whether the device or the WiFi is the cause of any performance issues?

data loss prevention (DLP)

remote browser isolation (RBI)

Cortex Data Lake

GlobalProtect

Correct Answer: D

GlobalProtect is an application designed to gather health telemetry about a device and its WiFi connectivity to help determine whether the device or the WiFi is causing any performance issues. Data loss prevention, remote browser isolation, and Cortex Data Lake do not specifically address WiFi connectivity and device health telemetry in this manner.