SSE-Engineer無料問題集「Palo Alto Networks Security Service Edge Engineer」

質問 1

An engineer has configured IPSec tunnels for two remote network locations; however, users are experiencing intermittent connectivity issues across the tunnels. What action will allow the engineer to receive notifications when the IPSec tunnels are down or experiencing instability?

（A）Create a new notification profile specifying conditions for remote network IPSec tunnel conditions.

（B）Select the IPSec tunnel monitoring and notifications checkbox when configuring the remote network IPSec tunnels.

（C）Create a tunnel log notification rule to alert on specified remote network IPSec tunnel conditions.

（D）Set up the operational health dashboard to email alerts for remote Network IPSec tunnel issues.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

During a deployment of Prisma Access (Managed by Strata Cloud Manager) for mobile users, a SAML authentication type and authentication profile in the Cloud Identity Engine application is successfully created.
Using this SAML authentication, what is a valid next step to configure authentication for mobile users?

（A）Create a SAML authentication profile in Strata Cloud Manager and link it to the Cloud Identity Engine profile.

（B）In Strata Cloud Manager, create a new authentication type of " Cloud Identity Engine. "

（C）Perform a full commit to Strata Cloud Manager so the Cloud Identity Engine profiles get synchronized from the application.

（D）Permit the Cloud Identity Engine service account RBAC access to the mobile user folder in Strata Cloud Manager.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which two configurations must be enabled to allow App Acceleration for SaaS applications? (Choose two.)

（A）QoS for user traffic

（B）Trusted Root CA for the CA certificate

（C）Forward Trust Certificate for the CA certificate

（D）Acceleration agent for the client machines

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

An engineer has configured a new Remote Networks connection using BGP for route advertisements. The IPSec tunnel has been established, but the BGP peer is not up. Which two elements must the engineer validate to solve the issue? (Choose two.)

（A）Advertise Default Route Checkbox

（B）Secret

（C）Peer AS Number

（D）MRAI Timers

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to-business (B2B) partners to its data centers. [Scenario as before, with overlapping prefixes advertised by B2B partners.] Which two actions will meet the customer requirements for the B2B connections? (Choose two.)

（A）Configure remote networks with NAT pools for each of the B2B connections.

（B）NAT the traffic at the customer premises equipment (CPE).

（C）Configure service connections for data center connectivity.

（D）Advertise the corresponding network prefixes using eBGP or static routes.

正解：A、D 解答を投票する

質問 6

What is the purpose of embargo rules in Prisma Access?

（A）Allowing traffic only from specific countries

（B）Blocking connections from specific countries

（C）Rate-limiting connections originating from specific countries

（D）Blocking traffic from Russia, China, and North Korea only

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

An employee is traveling to a country where their employer has not deployed a Prisma Access gateway.
Which two mobile user gateways will the VPN client connect to automatically? (Choose two.)

（A）Regional fallback

（B）Local zone

（C）Backup

（D）Global fallback

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

SSE-Engineer 無料問題集「Palo Alto Networks Security Service Edge Engineer」

弊社を連絡する

関連リンク

トップ試験