PSE-Strata-Pro-24 無料問題集「Palo Alto Networks Systems Engineer Professional - Hardware Firewall」

（A）Security profiles are applied to all policies by default, eliminating implicit trust of any data traversing the firewall.

（B）The default policy action for intrazone traffic is deny, eliminating implicit trust within a security zone.

（C）The default policy action for interzone traffic is deny, eliminating implicit trust between security zones.

（D）The default policy action allows all traffic unless explicitly denied.

（A）Advanced WildFire

（B）Advanced URL Filtering

（C）IoT Security

（D）Advanced Threat Prevention

（E）Enterprise DLP

（A）Cortex XDR

（B）VM-Series NGFW

（C）Prisma SD-WAN

（D）Prisma Cloud

（A）Advanced WildFire

（B）Advanced URL Filtering

（C）Advanced Threat Prevention

（D）Advanced DNS Security

（A）Network layer protection for the outer edge of a network

（B）Primarily securing north-south traffic entering and leaving the network

（C）Securing east-west traffic in a virtualized data center with flexible resource allocation

（D）Power utilization less than 500 watts sustained

（E）Guarding against external attacks

（A）Rivest-Shamir-Adleman (RSA) certificate authentication method (not the RSA key exchange algorithm) consumes more resources than Elliptic Curve Digital Signature Algorithm (ECDSA), but ECDSA is more secure.

（B）Large average transaction sizes consume more processing power to decrypt.

（C）Perfect Forward Secrecy (PFS) ephemeral key exchange algorithms such as Diffie-Hellman Ephemeral (DHE) and Elliptic-Curve Diffie-Hellman Exchange (ECDHE) consume more processing resources than Rivest-Shamir-Adleman (RSA) algorithms.

（D）SSL decryption traffic amounts vary from network to network.