PCNSE7無料問題集「Palo Alto Networks Certified Network Security Engineer」

質問 1

Which three settings are defined within the Templates object of Panorama? (Choose three.)

（A）Security

（B）Application Override

（C）Virtual Routers

（D）Interfaces

（E）Setup

正解：A、B、E 解答を投票する

質問 2

Refer to the exhibit.

Which will be the egress interface if the traffic's ingress interface is ethernet 1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

（A）ethernet1/5

（B）ethernet1/6

（C）ethernet1/3

（D）ethernet1/7

正解：A 解答を投票する

質問 3

The IT department has received complaints abou VoIP call jitter when the sales staff is making or receiving calls. QoS is enabled on all firewall interfaces, but there is no QoS policy written in the rulebase. The IT manager wants to find out what traffic is causing the jitter in real time when a user reports the jitter.
Which feature can be used to identify, in real time, the applications taking up the most bandwidth?

（A）QoS Log

（B）Applications Report

（C）QoS Statistics

（D）Application Command Center (ACC)

正解：C 解答を投票する

質問 4

A distributed log collection deployment has dedicated log Collectors. A developer needs a device to send logs to Panorama instead of sending logs to the Collector Group.
What should be done first?

（A）Remove the cable from the management interface, reload the log Collector and then re- connect that cable

（B）Contact Palo Alto Networks Support team to enter kernel mode commands to allow adjustments

（C）remove the device from the Collector Group

（D）Revert to a previous configuration

正解：C 解答を投票する

質問 5

Which authentication source requires the installation of Palo Alto Networks software, other than PAN-OS 7x, to obtain a username-to-IP-address mapping?

（A）Palo Alto Networks Captive Portal

（B）Microsoft Active Directory

（C）Microsoft Terminal Services

（D）Aerohive Wireless Access Point

正解：C 解答を投票する

質問 6

A company hosts a publically accessible web server behind a Palo Alto Networks next generation firewall with the following configuration information.
*
Users outside the company are in the "Untrust-L3" zone
*
The web server physically resides in the "Trust-L3" zone.
*
Web server public IP address: 23.54.6.10
*
Web server private IP address: 192.168.1.10
Which two items must be NAT policy contain to allow users in the untrust-L3 zone to access the web server? (Choose two)

（A）Untrust-L3 for Source Zone and Trust-L3 for Destination Zone

（B）Destination IP of 192.168.1.10

（C）Destination IP of 23.54.6.10

（D）Untrust-L3 for both Source and Destination zone

正解：A、C 解答を投票する

質問 7

An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

（A）Importation of a certificate from an HSM

（B）Security policy rule allowing SSL to the target server

（C）Root certificate imported into the firewall with "Trust" enabled

（D）Firewall connectivity to a CRL

正解：B 解答を投票する

質問 8

Which two virtualization platforms officially support the deployment of Palo Alto Networks VM-Series firewalls? (Choose two.)

（A）Microsoft Hyper-V

（B）Kernel Virtualization Module (KVM)

（C）Boot Strap Virtualization Module (BSVM)

（D）Red Hat Enterprise Virtualization (RHEV)

正解：A、B 解答を投票する

質問 9

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)

（A）.jar

（B）.dll

（C）.pdf

（D）.src

（E）.apk

（F）.exe

正解：A、C、E 解答を投票する

質問 10

What can missing SSL packets when performing a packet capture on dataplane interfaces?

（A）The missing packets are offloaded to the management plane CPU

（B）The packets are not captured because they are encrypted

（C）The packets are hardware offloaded to the offloaded processor on the dataplane

（D）There is a hardware problem with offloading FPGA on the management plane

正解：C 解答を投票する

PCNSE7 無料問題集「Palo Alto Networks Certified Network Security Engineer」

弊社を連絡する

関連リンク

トップ試験