NetSec-Generalist 無料問題集「Palo Alto Networks Network Security Generalist」

（A）Block sessions with unsupported versions.

（B）Block sessions on certificate errors.

（C）Allow sessions if resources not available.

（D）Allow sessions with unsupported versions.

（A）Create a custom application by using signatures.

（B）Create a security profile that maps the signature to the unknown application.

（C）Provide a packet capture to Palo Alto Networks and request an App-ID.

（D）Use WildFire API to map signatures to the unknown application.

（A）By automating all Security policy creations for multiple firewalls

（B）By pushing out all firewall policies from a single physical appliance

（C）By aggregating and analyzing logs from multiple firewalls

（D）By replacing the need for individual firewall deployment

（A）Use self-signed certificates for all environments.
Renew certificates manually once a year.
Avoid automating certificate management to maintain control.

（B）Rely on the cloud provider's default certificates.
Avoid renewing certificates to reduce overhead and complexity. Manage certificate deployment manually.

（C）Use a centralized certificate management solution. Regularly renew and update certificates. Employ strong encryption protocols.

（D）Implement different certificate authorities (CAs) for each environment. Use default certificate settings.Renew certificates only when they expire to reduce overhead and complexity.

（A）Source: Untrust (Any) Destination: Trust Application(s): web-browsing, ssh Action: allow

（B）Source: Untrust (Any) Destination: DMZ Application(s): ssh Action: allow

（C）Source: Untrust (Any) Destination: DMZ Application(s): web-browsing Action: allow

（D）Source: Untrust (Any) Destination: Untrust Application(s): web-browsing Action: allow

（A）Allocate the same number of vCPUs as the perpetual VM.

（B）Choose "Fixed vCPU Models" for configuration type.

（C）Allow only the same security services as the perpetual VM.

（D）Deploy virtual Panorama for management.