NetSec-Generalist 無料問題集「Palo Alto Networks Network Security Generalist」

（A）Traditional methods block specific applications using signatures.

（B）Content-ID focuses on blocking malicious IP addresses and ports.

（C）Content-ID inspects traffic at the application layer to provide real-time threat protection.

（D）Traditional methods provide comprehensive application layer inspection.

（A）Intrazone

（B）Interzone

（C）DMZ

（D）Clientless VPN

（A）Configuration snippets

（B）Plug-ins

（C）Policy Optimizer

（D）Template stacks

（A）Create a custom application by using signatures.

（B）Create a security profile that maps the signature to the unknown application.

（C）Provide a packet capture to Palo Alto Networks and request an App-ID.

（D）Use WildFire API to map signatures to the unknown application.

（A）IP address

（B）Host information profile (HIP)

（C）Session ID

（D）RADIUS Authentication

（A）Use self-signed certificates for all environments.
Renew certificates manually once a year.
Avoid automating certificate management to maintain control.

（B）Rely on the cloud provider's default certificates.
Avoid renewing certificates to reduce overhead and complexity. Manage certificate deployment manually.

（C）Use a centralized certificate management solution. Regularly renew and update certificates. Employ strong encryption protocols.

（D）Implement different certificate authorities (CAs) for each environment. Use default certificate settings.Renew certificates only when they expire to reduce overhead and complexity.

（A）DoS Protection

（B）Antivirus

（C）File Blocking

（D）Data Filtering