最新 [2024年12月17日]PSE-Strata試験正確解答Palo Alto Networks System Engineer Professional - Strata ExamのPDF問題
あなたのキャリアーを稼いで飛躍せよPalo Alto Networks 141問題
質問 # 13
What action would address the sub-optimal traffic path shown in the figure?
Key:
RN -Remote Network
SC -Service Connection
MU GW -Mobile User Gateway
- A. Onboard a Service Connection in the Americas region
- B. Onboard a Service Connection in the APAC region
- C. Remove the Service Connection in the EMEA region
- D. Onboard a Remote Network location in the EMEA region
正解：B
質問 # 14
Drag and Drop Question
Match the functions to the appropriate processing engine within the dataplane.
正解：
解説：
質問 # 15
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Drop
- B. Quarantine
- C. Alert
- D. Allow
- E. Reset
- F. Redirect
正解：A、C、D、E
解説：
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles.html
質問 # 16
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report?
(Choose two.)
- A. Weekly
- B. Monthly
- C. Bi-weekly
- D. Daily
正解：A、D
質問 # 17
Which three activities can the botnet report track? (Choose three.)
- A. Detecting malware within a one-hour period
- B. Using dynamic DNS domain providers
- C. Visiting a malicious URL
- D. Accessing domains registered in the last 30 days
- E. Launching a P2P application
- F. Initiating API calls to other applications
正解：B、D、E
解説：
https://media.paloaltonetworks.com/documents/Controlling-Botnets.pdf
質問 # 18
When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinkhole enabled, generating a traffic log. What will be the destination IP address in that log entry?
- A. The IP address of one of the external DNS servers identified in the anti-spyware database.
- B. The IP address specified in the sinkhole configuration.
- C. The IP address of sinkhole.paloaltonetworks.com
- D. The IP address of the command-and-control server.
正解：B
質問 # 19
Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.
- A. 1x PAN-GPCS-USER-C-BAS-1YR, 1x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-1YR
- B. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YRr 1x PAN-LGS-1TB-
1YR, 1x PAN-PRA-25, 1x PAN-SVC-BAS-PRA-25 - C. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-LGS-1TB-
1YR - D. 5500x PAN-GPCS-USER-C-BAS-1YR, 1000x PAN-GPCS-NET-B-BAS-1YR, 1x PAN-SVC-BAS- PRA-25. 1x PAN-PRA-25
正解：B
質問 # 20
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)
- A. Connector
- B. Attribute
- C. Database
- D. Recipient
- E. Schedule
- F. Operator
正解：A、B、F
質問 # 21
The firewall includes predefined reports, custom reports can be built for specific data and actionable tasks, or predefined and custom reports can be combined to compile information needed to monitor network security.
The firewall provides which three types of reports? (Choose three.)
- A. Netflow Reports
- B. PDF Summary Reports
- C. Botnet Reports
- D. SNMP Reports
- E. User or Group Activity Reports
正解：A、C、E
質問 # 22
The botnet report displays a confidence score of 1 to 5 indicating the likelihood of a botnet infection.
Which three sources are used by the firewall as the basis of this score? (Choose three.)
- A. Threat Landscape
- B. Bad Certificate Reports
- C. Traffic Type
- D. Botnet Reports
- E. Executable Downloads
- F. Number of Events
正解：C、E、F
解説：
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/monitoring/generate-botnet- reports
質問 # 23
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
正解：B
質問 # 24
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)
- A. Drop
- B. Quarantine
- C. Alert
- D. Allow
- E. Reset
- F. Redirect
正解：A、C、D、E
質問 # 25
Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)
- A. Check the WebUI Dashboard AutoFocus widget.
- B. Verify AutoFocus status using CLI.
- C. Check the license
- D. Verify AutoFocus is enabled below Device Management tab.
- E. Check for WildFire forwarding logs.
正解：C、D
質問 # 26
Which built-in feature of PAN-OS allows the NGFW administrator to create a policy that provides autoremediation for anomalous user behavior and malicious activity while maintaining user visibility?
- A. Dynamic user groups (DUGS)
- B. tagging groups
- C. remote device User-ID groups
- D. dynamic address groups (DAGs)
正解：A
質問 # 27
Which two methods will help avoid Split Brain when running HA in Active/Active mode? (Choose two.)
- A. Place your management interface in an Aggregate Interface Group configuration
- B. Configure a Backup HA1 Interface
- C. Create a loopback IP address and use that as a Source Interface
- D. Configure a Heartbeat Backup
正解：B、D
解説：
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/high-availability/set-up-activeactive-ha/configure-activeactive-ha.html
質問 # 28
A company has deployed the following
* VM-300 firewalls in AWS
* endpoint protection with the Traps Management Service
* a Panorama M-200 for managing its VM-Series firewalls
* PA-5220s for its internet perimeter,
* Prisma SaaS for SaaS security.
Which two products can send logs to the Cortex Data Lake? (Choose two).
- A. VM-300 firewalls
- B. Panorama M-200 appliance
- C. Prisma SaaS
- D. Traps Management Service
正解：A、B
質問 # 29
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?
- A. 1500 bytes
- B. 18 bytes
- C. depends on the Cortex Data Lake tier purchased
- D. 8MB
正解：A
解説：
Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVMCA0
質問 # 30
WildFire subscription supports analysis of which three types? (Choose three.)
- A. 7-Zip
- B. GIF
- C. Flash
- D. DMG
- E. RPM
- F. ISO
正解：A、C、E
解説：
WildFire, a cloud-based malware analysis service provided by Palo Alto Networks, supports the analysis of various file types to detect malicious content. Specifically, it supports:
B: 7-Zip: WildFire can analyze compressed files in the 7-Zip format, which is commonly used to distribute malware in compressed archives.
C: Flash: Analysis of Flash files helps in detecting malware that can be embedded in Flash content, which has historically been a common vector for exploits.
D: RPM: WildFire supports the analysis of RPM packages, which are used in various Linux distributions and can be used to distribute malicious software.
質問 # 31
What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)
- A. Increased security due to scalable cloud delivered security Services (CDSS)
- B. improved revenue due to more efficient network traffic throughput
- C. operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)
- D. Cost savings due to reduction in IT management effort and device
- E. minimized threat landscape due to reducing internet footprint to a single point of failure
正解：A、B、D
質問 # 32
......
正真正銘のベスト資料はPSE-Strataオンライン練習試験：https://www.jpntest.com/shiken/PSE-Strata-mondaishu
練習できるPSE-StrataにはJPNTest画期的なあなたをPalo Alto Networks System Engineer Professional - Strata Exam試験合格させます合格率：https://drive.google.com/open?id=1VJQSaGNLV1xkfbK6t5iLr9UWyjAtqItG