PSE-Strata-Pro-24問題集、Palo Alto Networks実際の試験問題

質問 1

Which two products can be integrated and managed by Strata Cloud Manager (SCM)? (Choose two)

A. VM-Series NGFW

B. Prisma Cloud

C. Prisma SD-WAN

D. Cortex XDR

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 2

A customer asks a systems engineer (SE) how Palo Alto Networks can claim it does not lose throughput performance as more Cloud-Delivered Security Services (CDSS) subscriptions are enabled on the firewall.
Which two concepts should the SE explain to address the customer's concern? (Choose two.)

A. Management Data Plane Separation

B. Single Pass Architecture

C. Advanced Routing Engine

D. Parallel Processing

正解: B,D

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which two tools should a systems engineer use to showcase the benefit of an evaluation that a customer has just concluded?

A. Golden Images

B. Firewall Sizing Guide

C. Security Lifecycle Review (SLR)

D. Best Practice Assessment (BPA)

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which three known variables can assist with sizing an NGFW appliance? (Choose three.)

A. Telemetry enabled

B. Max sessions

C. Packet replication

D. Connections per second

E. App-ID firewall throughput

正解: B,D,E

解説: (PassTest メンバーにのみ表示されます)

質問 5

A company has multiple business units, each of which manages its own user directories and identity providers (IdPs) with different domain names. The company's network security team wants to deploy a shared GlobalProtect remote access service for all business units to authenticate users to each business unit's IdP.
Which configuration will enable the network security team to authenticate GlobalProtect users to multiple SAML IdPs?

A. Multiple authentication mode Cloud Identity Engine authentication profile for use on the GlobalProtect portals and gateways

B. Multiple Cloud Identity Engine tenants for each business unit

C. Authentication sequence that has multiple authentication profiles using different authentication methods

D. GlobalProtect with multiple authentication profiles for each SAML IdP

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

A prospective customer has provided specific requirements for an upcoming firewall purchase, including the need to process a minimum of 200,000 connections per second while maintaining at least 15 Gbps of throughput with App-ID and Threat Prevention enabled.
What should a systems engineer do to determine the most suitable firewall for the customer?

A. Download the firewall sizing tool from the Palo Alto Networks support portal.

B. Use the product selector tool available on the Palo Alto Networks website.

C. Upload 30 days of customer firewall traffic logs to the firewall calculator tool on the Palo Alto Networks support portal.

D. Use the online product configurator tool provided on the Palo Alto Networks website.

正解: B

質問 7

Which use case is valid for Palo Alto Networks Next-Generation Firewalls (NGFWs)?

A. Serverless NGFW code security provides public cloud security for code-only deployments that do not leverage virtual machine (VM) instances or containerized services.

B. Code-embedded NGFWs provide enhanced internet of things (IoT) security by allowing PAN-OS code to be run on devices that do not support embedded virtual machine (VM) images.

C. PAN-OS GlobalProtect gateways allow companies to run malware and exploit prevention modules on their endpoints without installing endpoint agents.

D. IT/OT segmentation firewalls allow operational technology resources in plant networks to securely interface with IT resources in the corporate network.

正解: D

解説: (PassTest メンバーにのみ表示されます)

Palo Alto Networks Systems Engineer Professional - Hardware Firewall - PSE-Strata-Pro-24 模擬練習