PSE Strata Exam QuestionsBrowse all questions from this exam

PSE Strata Exam - Question 21


Which three features are used to prevent abuse of stolen credentials? (Choose three.)

Show Answer
Correct Answer: A,B,C,E

Multi-factor authentication is one of the key methods used to prevent the abuse of stolen credentials by requiring additional verification beyond simply a password. URL Filtering Profiles help block access to malicious or phishing websites, which are common methods of obtaining and abusing stolen credentials. SSL decryption rules are important because they enable inspection of encrypted traffic, which can carry malicious payloads or connections to malicious sites intended to exploit stolen credentials. Collectively, these three features enhance security by addressing various methods of credential compromise and abuse.

Discussion

9 comments
Sign in to comment
AOtwomaOptions: ABE
Nov 2, 2022

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential-phishing/set-up-credential-phishing-prevention#idc77030dc-6022-4458-8c50-1dc0fe7cffe4

mushi4kaOptions: ABE
Oct 1, 2022

Multi Factor Authentication, URL filter, SSL Decryption https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential-phishing

yet_another_userOptions: ABE
Jun 20, 2023

Agree with A, B and E. Wildfire delivers input for PAN-DB which feeds the URL catalog, but see the steps in links below.

GabranchOptions: ABC
May 7, 2024

Conflicted but the press release for PAN-OS 8.0 shows WF as a component to recofnizing and blocking phishing sites, preventing credential abuse: https://www.paloaltonetworks.com/company/press/2017/palo-alto-networks-delivers-industry-first-capabilities-to-prevent-credential-theft-and-abuse

LostatSeaOptions: ABE
Jul 24, 2023

ABE, Agree with others

fatehzOptions: ABE
Aug 30, 2023

Agree with others ABE, C with wildfire is wrong WF is a sandbox

Gabranch
May 8, 2024

WF scans email for http/https links to phishing sites.

cheatfaceOptions: ABE
Nov 22, 2023

Agreed, it's ABE

ck19Options: ABE
May 13, 2024

ABE are correct

dthensleyOptions: ABC
Jul 16, 2024

ABC are the correct answers. https://www.paloaltonetworks.com/company/press/2017/palo-alto-networks-delivers-industry-first-capabilities-to-prevent-credential-theft-and-abuse