PSE-Strata無料問題集「Palo Alto Networks System Engineer Professional

質問 1

The Palo Ao Networks Cloud Identity Engino (CIE) includes which service that supports identity Providers (ldP)?

（A）Cloud Authentication Service that supports IdP using SAML 2.0 and OAuth2

（B）Directory Sync and Cloud Authentication Service that support IdP ung SAML 2.0 and OAuth2

（C）Directory Sync that supports IdP using SAML 2.0

（D）Directory Sync and Cloud Authentication Service that support IdP ng SAML 2.0

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

A client chooses to not block uncategorized websites.
Which two additions should be made to help provide some protection? (Choose two.)

（A）A security policy rule using only known URL categories with the action set to allow

（B）A file blocking profile attached to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads

（C）A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites

（D）A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which two configuration elements can be used to prevent abuse of stolen credentials? (Choose two.)

（A）Dynamic user groups (DUGs)

（B）WildFire analysis

（C）Multi-factor authentication (MFA)

（D）URL Filtering Profiles

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?

（A）There will be a popup to ask if the Master Key from the Panorama should replace the Master Key from the managed firewalls

（B）The Master Key from the managed firewalls will be overwritten with the Master Key from Panorama

（C）The push operation will fail regardless of an error or not within the configuration itself

（D）Provided there's no error within the configuration to be pushed, the push will succeed

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds.
How is this goal accomplished?

（A）Configure the Anti-Spyware profile with the number of rule counts to match the occurrence frequency

（B）Submit a request to Palo Alto Networks to change the behavior at the next update

（C）Add a correlation object that tracks the occurrences and triggers above the desired threshold

（D）Create a custom spyware signature matching the known signature with the time attribute

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

A customer is designing a private data center to host their new web application along with a separate headquarters for users.
Which cloud-delivered security service (CDSS) would be recommended for the headquarters only?

（A）Threat Prevention

（B）Advanced URL Filtering (AURLF)

（C）WildFire

（D）DNS Security

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)

（A）CSV

（B）EDL

（C）TXT

（D）API

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

What will best enhance security of a production online system while minimizing the impact for the existing network?

（A）Virtual wire

（B）virtual systems

（C）active / active high availability (HA)

（D）Layer 2 interfaces

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

（A）M-100

（B）M-200

（C）Panorama VM-Series

（D）M-600

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Which two methods are used to check for Corporate Credential Submissions? (Choose two.)

（A）User-ID credential check

（B）IP user mapping

（C）doman credentialiter

（D）LDAP query

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

PSE-Strata 無料問題集「Palo Alto Networks System Engineer Professional - Strata」

弊社を連絡する

関連リンク

トップ試験