Palo Alto Networks PSE-Strata-Associate豪華セット学習ガイドにはオンライン試験エンジン
PSE-Strata-Associate問題集レビュー専門クイズ学習材料
質問 # 12
The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and received from this website.
Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?
- A. Certificate Proxy
- B. Inbound Proxy
- C. Web Proxy
- D. Forward Proxy
正解：D
質問 # 13
How does Cloud Identity Engine (CIE) simplify deployment of cloudbased services to provide user authentication?
- A. It ensures that a compromised master key does not compromise the configuration encryption for an entire deployment.
- B. It allows configuration of an authentication source once instead of for each authentication method.
- C. It expands the capability to filter and forward decrypted and non-decrypted Transport Layer Security (TLS) traffic.
- D. It authenticates users via a cloud-based service and refers to the hub for mappings for group identification.
正解：D
質問 # 14
Which of the following statements applies to WildFire Public Cloud verdicts?
- A. They must be manually downloaded from the WildFire portal.
- B. They are unique to the affected Next-Generation Firewall (NGFW).
- C. They are automatically shared with third-party firewall vendors.
- D. They are shared globally with all WildFire customers.
正解：D
質問 # 15
A Human Resources (HR) application has the URL of https://hr.company.com:4433/.
How should the "Service" column of the Security policy be set to match and permit this application?
- A. Set to "service-http".
- B. Set to "application-defaults," which will locate and match the HR application.
- C. Define and then select a new custom Transmission Control Protocol (TCP) service with port 4433.
- D. Edit "service-https" to use port 4433.
正解：C
質問 # 16
A customer interested in Panorama is concerned about managing multiple firewalls they are putting in place globally. Each location has its own IP addresses, zones, and VPN configurations.
Which element of Panorama will assist the customer in pushing this unique configuration information to the individual firewalls?
- A. templates
- B. device profile
- C. device groups
- D. GlobalProtect
正解：A
質問 # 17
A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.
How will the performance of the firewall be affected if the customer also enables both WildFire and User-ID?
- A. The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.
- B. Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.
- C. There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.
- D. Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.
正解：C
質問 # 18
When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?
- A. Layer 3 interface
- B. TAP interface
- C. virtual wire interface
- D. SLR interface
正解：B
質問 # 19
Which Next-Generation Firewall (NGFW) deployment model allows an organization to monitor traffic during evaluations without interruption to network traffic?
- A. virtual wire
- B. Layer 2
- C. TAP mode
- D. Layer 3
正解：C
質問 # 20
Which two Cloud-Delivered Security Services (CDSS) would be appropriate for an organization that wants to secure internet traffic on a perimeter firewall? (Choose two.) Select 2 Correct Responses
- A. Advanced URL Filtering (AURLF)
- B. WildFire
- C. Autonomous Digital Experience Management (ADEM)
- D. SD-WAN
正解：A、B
質問 # 21
Implementation of which PAN-OS feature improves visibility and prevention of malware?
- A. Data Filtering profiles
- B. Antivirus profiles
- C. Anti-Spyware profiles
- D. Decryption profiles
正解：C
質問 # 22
In which two of the following scenarios is personal data excluded from protection under the General Data Protection Regulation (GDPR)?
Select 2 Correct Responses
- A. The data is related to a person's economic or cultural identity.
- B. The data was generated in the course of a purely personal or household activity.
- C. The data will be used for the prevention of criminal offenses.
- D. The data was automated as part of an information filing system.
正解：C、D
質問 # 23
Using a comprehensive range of natively-integrated subscriptions and inline machine learning (ML), what does a Next-Generation Firewall (NGFW) use to prevent known and unknown threats in real time?
- A. Cloud Native Security Platform (CNSP)
- B. Cloud Security Posture Management (CSPM)
- C. Cloud Identity Access Management (CIAM)
- D. Cloud Delivered Security Services (CDSS)
正解：D
質問 # 24
The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?
- A. security zones
- B. DHCP groups
- C. LLDP profiles
- D. security profile groups
正解：A
質問 # 25
Which feature allows a customer to gain visibility and respond to changes in user behavior or potential threats without manual policy changes?
- A. Lightweight Directory Access Protocol (LDAP) sync
- B. dynamic address objects
- C. User-ID agent
- D. dynamic user groups (DUGs)
正解：D
質問 # 26
......
試験問題解答ブレーン問題集でPSE-Strata-Associate試験問題集PDF問題：https://www.jpntest.com/shiken/PSE-Strata-Associate-mondaishu