PSE-Strata無料問題集「Palo Alto Networks System Engineer Professional

質問 1

A customer requires an analytics tool with the following attributes:
- Uses the logs on the firewall to detect actionable events on the network
- Automatically processes a series of related threat events that, when combines, indicate a likely comprised host on the network
- Pinpoints the area of risk and allows for assessment of the risk to action can be taken to prevent exploitation of network resources Which feature of PAN-OS will address these requirements?

（A）WildFire with application program interface (API) calls for automation

（B）Third-party security information and event management (SIEM) which can ingest next-generation firewall (NGFW) logs

（C）Automated correlation engine (ACE)

（D）Cortex XDR and Cortex Data Lake

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

WildFire subscription supports analysis of which three types? (Choose three.)

（A）Flash

（B）GIF

（C）DMG

（D）ISO

（E）RPM

（F）7-Zip

正解：A、E、F 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which two configuration elements can be used to prevent abuse of stolen credentials? (Choose two.)

（A）Dynamic user groups (DUGs)

（B）WildFire analysis

（C）Multi-factor authentication (MFA)

（D）URL Filtering Profiles

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which proprietary technology solutions will allow a customer to identify and control traffic sources regardless of internet protocol (IP) address or network segment?

（A）User-ID and Source-ID

（B）User ID and Device-ID

（C）Source-D and Network.ID

（D）Source ID and Device-ID

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

（A）Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports.

（B）Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports.

（C）Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis.

（D）Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture.
What are two steps in this process? (Choose two.)

（A）Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall

（B）Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls

（C）Categorize data and applications by levels of sensitivity

（D）Validate user identities through authentication

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

In PAN-OS 10.0 and later, DNS Security allows policy actions to be applied based on which three domains?
(Choose three.)

（A）grayware

（B）command and control (C2)

（C）government

（D）benign

（E）malware

正解：A、B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which three signature-based Threat Prevention features of the firewall are informed by intelligence from the Threat Intelligence Cloud? (Choose three.)

（A）Anti-Spyware

（B）App-ID protection

（C）Anti-Virus

（D）Botnet detection

（E）Vulnerability protection

正解：A、C、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

What is the key benefit of Palo Alto Networks Single Pass Parallel Processing design?

（A）It allows Palo Alto Networks to add new devices to existing hardware

（B）It allows Palo Alto Networks to add new functions to existing hardware

（C）Only one processor is needed to complete all the functions within the box

（D）There are no benefits other than slight performance upgrades

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

（A）Database

（B）Schedule

（C）Attribute

（D）Connector

（E）Operator

（F）Recipient

正解：C、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

PSE-Strata 無料問題集「Palo Alto Networks System Engineer Professional - Strata」

弊社を連絡する

関連リンク

トップ試験