PSE-PrismaCloud無料問題集「Palo Alto Networks PSE Palo Alto Networks System Engineer Professional

質問 1

The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

（A）SNS

（B）SQS

（C）Lambda

（D）CodeDeploy

正解：C 解答を投票する

質問 2

When an on-premises NGFW (customer gateway) is used to connect to the Virtual Gateway, which two IKE profiles cannot be used? (Choose two.)

（A）Group14 / SHA-256 / AES-256-GCM / IKE-V1

（B）Group14 / SHA-256 / AES-256-CBC / IKE-V1

（C）Group2 / SHA-1 / AES-128-CBC / IKE-V1

（D）Group2 / SHA-1 / AES-128-GCM / IKE-V1

（E）Group2 / SHA-1 / AES-128-CBC

正解：A、B 解答を投票する

質問 3

Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.

正解：

質問 4

An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and 10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

（A）10.0.1.254

（B）10.0.3.1

（C）10.0.2.1

（D）10.0.3.255

正解：B 解答を投票する

質問 5

Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?

（A）show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

（B）network where dest publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

（C）network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'

（D）network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which change represents a VM-Series NGFW license transfer?

（A）VM-100 BYOL on Microsoft Azure to VM-300 BYOL on Microsoft Azure

（B）VM-300 BYOL on Microsoft Azure to VM-300 PAY6 on Amazon Web Services

（C）VM-100 BYOL on Microsoft Azure to VM-300 PAYG on Amazon Web Services

（D）VM-100 BYOL on Microsoft Azure to VM-100 BYOL on Amazon Web Services

正解：A 解答を投票する

質問 7

Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?

（A）GDPR

（B）EU Data Protection Directive 95/46/EC

（C）ISO 27001

（D）Payment Card Industry 3.0

正解：A 解答を投票する

質問 8

Which option is defined by the creation and change of public cloud services managed in a repeatable and predictable fashion?

（A）platform as a service

（B）infrastructure as a service

（C）infrastructure as code

（D）software as code

正解：B 解答を投票する

質問 9

Which two resource types are included in the Prisma Cloud Enterprise licensing count? (Choose two.)

（A）CloudFront distributions

（B）Elastic Compute Cloud (EC2) instances

（C）Security groups

（D）Network Address Translation (NAT) gateways

正解：A、B 解答を投票する

質問 10

The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

（A）IPsecVPN

（B）Direct Connect

（C）Fast Connect

（D）ExpressRoute

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

PSE-PrismaCloud 無料問題集「Palo Alto Networks PSE Palo Alto Networks System Engineer Professional - Prisma Cloud」

弊社を連絡する

関連リンク

トップ試験