SSE-Engineer問題集、Palo Alto Networks実際の試験問題

質問 1

What is the purpose of embargo rules in Prisma Access?

A. Blocking connections from specific countries

B. Blocking traffic from Russia, China, and North Korea only

C. Rate-limiting connections originating from specific countries

D. Allowing traffic only from specific countries

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which policy configuration in Prisma Access Browser (PAB) will protect an organization from malicious BYOD and minimize the impact on the user experience?

A. One that allows access to applications with data masking or watermarking

B. One for session recording

C. One that blocks file exchange

D. One that blocks elements such as screen scrapers

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

When configuring Remote Browser Isolation (RBI) with Prisma Access (Managed by Strata Cloud Manager), which element is required to define the protected URLs for mobile users?

A. A Security policy with the target URL categories and set the action to " Isolate "

B. A DNS Security profile applied to a Security policy with the action of " Isolate " for the target remote browser DNS categories

C. An RBI profile applied to the URL access management profile

D. A URL access management profile with site access set to " Isolate " applied to a Security policy

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

During a deployment of Prisma Access (Managed by Strata Cloud Manager) for mobile users, a SAML authentication type and authentication profile in the Cloud Identity Engine application is successfully created.
Using this SAML authentication, what is a valid next step to configure authentication for mobile users?

A. Create a SAML authentication profile in Strata Cloud Manager and link it to the Cloud Identity Engine profile.

B. Permit the Cloud Identity Engine service account RBAC access to the mobile user folder in Strata Cloud Manager.

C. Perform a full commit to Strata Cloud Manager so the Cloud Identity Engine profiles get synchronized from the application.

D. In Strata Cloud Manager, create a new authentication type of " Cloud Identity Engine. "

正解: A

質問 5

How can the Prisma Access Browser (PAB) Extension extend an organization ' s web security posture to managed devices that are not connected to a VPN for browser-based access to company-sanctioned web applications?

A. It optimizes network performance for browser traffic to Prisma Access for all operating systems and browsers.

B. It incorporates remote browser isolation (RBI) for the endpoint, running web sessions in a contained environment on any browser.

C. It tunnels all endpoint traffic on unmanaged devices, ensuring all device traffic is secured.

D. It enforces consistent web access and data control policies directly within the browser, regardless of device management status.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

An engineer has configured a new Remote Networks connection using BGP for route advertisements. The IPSec tunnel has been established, but the BGP peer is not up. Which two elements must the engineer validate to solve the issue? (Choose two.)

A. Secret

B. Advertise Default Route Checkbox

C. MRAI Timers

D. Peer AS Number

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 7

A large retailer has deployed all of its stores with the same IP address subnet. An engineer is onboarding these stores as Remote Networks in Prisma Access. While onboarding each store, the engineer selects the " Overlapping Subnets " checkbox. Which Remote Network flow is supported after onboarding in this scenario?

A. To remote network

B. To private applications

C. To the internet

D. To mobile users

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

An organization deploys the Prisma Access Browser (PAB) to secure web access from diverse endpoints, including personal devices where IT has limited control. To maintain a strong and proactive security posture across these varied environments, why is the use of PAB device posture attributes, such as OS version, file system encryption, and device type, considered essential?

A. It provides the administrators of PAB the ability to enable disk encryption on all endpoints.

B. It permits PAB to function as a standalone endpoint detection and response (EDR) solution.

C. It enables the administrators of PAB to independently perform OS and browser patching on unmanaged devices.

D. It allows administrators to identify and restrict access based on OS version and browser type on unmanaged devices.

正解: D

解説: (PassTest メンバーにのみ表示されます)

Palo Alto Networks Security Service Edge Engineer - SSE-Engineer 模擬練習