PSE-Strata問題集、Palo Alto Networks実際の試験問題

質問 1

Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)

A. enable User-ID

B. define an SSL decryption rulebase

C. define URL Filtering Profile

D. validate credential submission detection

E. enable App-ID

正解: A,B,C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)

A. weaponize vulnerabilities

B. exfiltrate data

C. deliver the malware

D. recon the target

E. lateral movement

F. breach the perimeter

正解: B,C,E,F

解説: (PassTest メンバーにのみ表示されます)

質問 3

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

A. Store updates on an intermediary server and point all the firewalls to it

B. Monitor update announcements and manually push updates to Crewall

C. Use dynamic updates with the most aggressive schedule required by business needs

D. Run a Perl script to regularly check for updates and alert when one is released

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which CLI command allows visibility into SD-WAN events such as path Selection and path quality measurements?

A. >show sdwan event

B. >show sdwan path-monitor stats vif

C. >show sdwan connection all

D. >show sdwan session distribution policy-name

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 5

Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls?
(Choose three.)

A. Client Probing

B. SNMP server

C. eDirectory monitoring

D. RADIUS

E. TACACS

F. Active Directory monitoring

G. Lotus Domino

正解: A,C,F

解説: (PassTest メンバーにのみ表示されます)

質問 6

Which two steps are required to configure the Decryption Broker? (Choose two.)

A. enable a pair of virtual wire interfaces to forward decrypted traffic

B. enable SSL Forward Proxy decryption

C. activate the Decryption Broker license

D. reboot the firewall to activate the license

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which three script types can be analyzed in WildFire? (Choose three)

A. MonoSenpt

B. VBScript

C. PythonScript

D. JScript

E. PowerShell Script

正解: B,D,E

解説: (PassTest メンバーにのみ表示されます)

質問 8

Which profile or policy should be applied to protect against port scans from the internet?

A. An App-ID security policy rule to block traffic sourcing from the untrust zone

B. Security profiles to security policy rules for traffic sourcing from the untrust zone

C. Zone protection profile on the zone of the ingress interface

D. Interface management profile on the zone of the ingress interface

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 9

For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.)

A. The customer edge device needs to support policy-based routing with symmetric return functionality

B. The resources in the Datacenter will only be able to reach remote network resources that share the same region

C. A maximum of four service connections per Datacenter are supported with this topology

D. Network segments in the Datacenter need to be advertised to only one Service Connection

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 10

What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

A. Increased security due to scalable cloud delivered security Services (CDSS)

B. Cost savings due to reduction in IT management effort and device

C. improved revenue due to more efficient network traffic throughput

D. operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)

正解: A,B,D

解説: (PassTest メンバーにのみ表示されます)

Palo Alto Networks System Engineer Professional - Strata - PSE-Strata 模擬練習