JPNTestでは、SecOps-Generalist試験対策としてPDF版、デスクトップテストエンジン、オンラインテストエンジンの3つの形式をご用意しています。印刷して持ち歩きたい方も、Palo Alto Networks Security Operations Generalistの本番環境を再現して練習したい方も、自分に合ったスタイルで242の問題に取り組めます。

Palo Alto Networks SecOps-Generalist 試験概要:

Palo Alto Networks SecOps-Generalist 試験シラバストピック:

Palo Alto Networks Security Operations GeneralistのQ&A

Palo Alto Networks Security Operations Generalist 認定 SecOps-Generalist 試験問題：

問題 #1

In the context of Palo Alto Networks Strata NGFWs and Prisma Access, which statement MOST accurately describes the fundamental role of Security Zones in network security policy enforcement?

A. Zones classify traffic based on application type (e.g., web, email) before App-ID inspection.
B. Zones are primarily used for routing decisions, directing traffic between different physical or virtual interfaces.
C. Zones are logical containers for IP addresses and subnets used for reporting and logging purposes only.
D. Zones define trust boundaries and serve as the source and destination criteria for matching security policy rules.
E. Zones automatically permit all traffic flow between interfaces assigned to the same zone, and implicitly deny traffic between different zones.

問題 #2

An organization is concerned about attackers exploiting known vulnerabilities in their web servers and client applications. They have deployed Palo Alto Networks NGFWs with an Advanced Threat Prevention subscription. Which specific security profiles, enhanced by the Advanced Threat Prevention CDSS, are primarily responsible for protecting against vulnerability exploits and preventing spyware/command-and-control communications?

A. File Blocking profile for controlling file transfers.
B. Data Filtering profile for preventing sensitive data exfiltration.
C. Vulnerability Protection and Anti-Spyware profiles for exploit prevention and blocking C2 traffic.
D. Antivirus profile for malware signature detection.
E. URL Filtering profile for blocking access to malicious websites.

問題 #3

An organization needs to create a Security Policy rule in Prisma Access to allow remote users (members of the 'Sales-Team' group) to access an internal Customer Relationship Management (CRM) application hosted on a server farm in the data center (represented by the 'CRM-Servers' Address Group within the 'Service-Connection' zone). The CRM application uses a custom TCP port. The policy should also apply appropriate threat prevention profiles. Which combination of elements must be configured in the Security Policy rule for the traffic originating from the remote users to the CRM application?

A. Option E
B. Option D
C. Option B
D. Option C
E. Option A

問題 #4

A security team wants to harden their network by preventing users from downloading potentially dangerous file types from the internet (e.g., executable files, archive files, batch scripts) while still allowing safe documents like PDFs. They also want to prevent the upload of encrypted or password-protected archive files (like .zip' or .rar') to external services, as these cannot be inspected for malware or sensitive dat a. Which Content-ID feature is specifically used to implement these restrictions based on file type and direction?

A. URL Filtering profile configured to block websites known to host malicious file types.
B. File Blocking profile configured with rules specifying file types and transfer directions (upload/download) to block or alert on.
C. Data Filtering profile configured to detect file extensions in the data stream.
D. Threat Prevention profile with custom vulnerability signatures matching dangerous file headers.
E. WildFire analysis profile configured to block unknown file types.

問題 #5

A large enterprise is migrating some internal applications to a cloud-based Software-as-a-Service (SaaS) model and implementing a SASE architecture leveraging Palo Alto Networks Prisma Access. They are encountering issues with the correct identification and enforcement of policies for a specific custom internal web application that now runs on a standard HTTPS port (443) alongside other legitimate SaaS traffic. The security team needs to ensure this custom application is identified separately from general 'web-browsing' and enforce specific QOS and security profiles on it.

A. Rely on Content-ID to identify the specific application content and apply policies based on content signatures instead of App-ID.
B. Modify the default 'web-browsing' application signature to exclude traffic destined for the specific IP address/FQDN of the custom application.
C. Create a custom application signature using App-ID based on unique characteristics of the application's payload or behavior, then create a security policy rule matching this custom App-ID.
D. Configure a URL Filtering profile to block access to the custom application's URL, then allow it in a separate rule with the desired profiles.
E. Deploy a separate, dedicated Strata NGFW appliance specifically for this custom application traffic before it reaches Prisma Access.

解説：