PCNSC問題集、Palo Alto Networks実際の試験問題

質問 1

In an HA (High Availability) setup, what is the purpose of the HA3 link?

A. Exchange heartbeats between the devices

B. Synchronize configuration changes

C. Transmit HA control traffic

D. Synchronize session state information

正解: D

質問 2

Which CLI command should you use to verify whether all SFP SFP*, or QSFP modules are installed in a firewall?

A. show interface <interface nane> detail

B. show system info

C. show system state filter sys.p*.phy

D. show system state filter sys.s'-p'-phy

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

A customer has a five-year-old firewall in production in the time since the firewall was installed, the IT team deleted unused security policies on a regular basis but they did not remove the address objects and groups that were part ofthese security policies.
What is the best way to delete all of the unused address objects on the firewall?

A. Using CLI execute requestconfiguration address-objectsremove-unused-objects.

B. Go to Address Objects under the Objects tab and click on Remove unused objects.

C. Search each address object with Global Find and delete if it shows that the address object is not referenced.

D. Import the configuration in Expedition, remove unused address objects, and reimport the configuration.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 4

A customer has a pair of Panorama HA appliances tunning local log collectors and wants to have log redundancy on logs forwarded from firewalls Which two configuration options fulfill the customer's requirement for log redundancy? (Choose two)

A. Panorama operational mode needs to be Dedicated Log Collector

B. A Collector Group must contain at least two Log Collectors

C. Panorama configured in HA provides log redundancy

D. Log redundancy must be enabled per Collector Group

正解: B,D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which GlobalProtect feature ensures that only trusted endpoints can connect to the network?

A. Host Information Profile (HIP)

B. SSL Decryption

C. User-ID

D. App-ID

正解: A

質問 6

Which of the following is a primary use case for the Decryption Broker feature?

A. Sharing decrypted traffic with multiple security appliances

B. Decrypting outbound SSL traffic

C. Aggregating traffic logs from different sources

D. Managing multiple decryption rules

正解: A

質問 7

Match the task for server settings in group mapping with its order in the process.

正解:

Explanation:
To configure group mapping on a Palo Alto Networks firewall, follow these steps in order:
* Navigate to Device > User Identification > Group Mapping:
* This is the initial step where you access the group mapping settings in the web interface.
* Add a new group mapping:
* After navigating to the group mapping section, the next step is to add a new group mapping configuration.
* Enter a unique name to identify the group mapping configuration:
* Provide a unique and descriptive name for the new group mapping configuration to easily identify it.
* Create an LDAP Server Profile:
* This step involves creating an LDAP Server Profile, which defines the connection settings for the LDAP server that will be queried for user and group information.
* Select the LDAP Server Profile:
* Finally, associate the created LDAP Server Profile with the group mapping configuration. This links the group mapping to the specific LDAP server.
Order in Process:
* Navigate to Device > User Identification > Group Mapping
* Add a new group mapping.
* Enter a unique name to identify the group mapping configuration.
* Create an LDAP Server Profile.
* Select the LDAP Server Profile.
References:
* Palo Alto Networks - Configuring Group Mapping:
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/user-id/map-users-to-groups
* Palo Alto Networks - User-ID Agent and Group Mapping Configuration:
https://knowledgebase.paloaltonetworks.com

Palo Alto Networks Certified Network Security Consultant - PCNSC 模擬練習