PSE-PrismaCloud無料問題集「Palo Alto Networks PSE Palo Alto Networks System Engineer Professional

質問 1

What is the Palo Alto Networks default Prisma Cloud setting for Alert Disposition to reduce the number of false positives?

（A）Conservative

（B）Aggressive

（C）Moderate

（D）High

正解：A 解答を投票する

質問 2

Which two types of Resource Query Language (RQL) queries can be used to create policies? (Choose two.)

（A）system from

（B）hose from

（C）network from

（D）event from

正解：B、D 解答を投票する

質問 3

Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

（A）CloudFront distributions

（B）Elastic Compute Cloud (EC2) instances

（C）Security groups

（D）Network Address Translation (NAT) gateways

正解：A、B 解答を投票する

質問 4

Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

（A）show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

（B）network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

（C）network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

（D）network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

（A）Amazon Web Services WAF

（B）VM-Series firewalls

（C）Prisma SaaS

（D）Traps

（E）Security Groups

正解：A、B、D 解答を投票する

質問 6

An administrator deploys a VM-Series firewall into Amazon Web Services. Which attribute must be disabled on the data-plane elastic network interface for the instance to handle traffic that is not destined to its own IP address?

（A）security group

（B）source/destination checking

（C）tags

（D）elastic ip address

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

An image containing medium vulnerabilities that do not have available fixes is being deployed into the sock-shop namespace. Prisma Cloud has been configured for vulnerability management within the organization's continuous integration (CI) tool and registry.
What will occur during the attempt to deploy this image from the CI tool into the sock-shop namespace?

（A）The CI policy will fail the build; therefore, the image will not be deployed.

（B）The image will be deployed successfully, but no vulnerabilities will be reported.

（C）The image will be deployed successfully, and all vulnerabilities will be reported.

（D）The image will pass the CI policy, but will be blocked by the deployed policy; therefore, it will not be deployed.

正解：A 解答を投票する

質問 8

Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)

（A）Google Cloud Platform

（B）Microsoft Azure

（C）Amazon Web Services

（D）Oracle Cloud

正解：A、B 解答を投票する

質問 9

Which type of Prisma Cloud Enterprise alert supports autoremediation?

（A）audit

（B）anomaly

（C）config

（D）network

正解：C 解答を投票する

質問 10

When protecting against attempts to exploit client-side and server-side vulnerabilities, what is the Palo Alto Networks best practice when using NGFW Vulnerability Protection Profiles?

（A）Clone the predefined Strict Profile, with packet capture settings disabled

（B）Use the default Vulnerability Protection Profile to protect clients from all known critical, high, and medium-severity threats

（C）Use the default Vulnerability Protection Profile to protect servers from all known critical, high, and medium-severity threats

（D）Clone the predefined Strict Profile, with packet capture settings enabled

正解：D 解答を投票する

PSE-PrismaCloud 無料問題集「Palo Alto Networks PSE Palo Alto Networks System Engineer Professional - Prisma Cloud」

弊社を連絡する

関連リンク

トップ試験