• ホーム
  • ブログ
  • PSE-Strata無料認定試験材料はこちらの224問題 [Q105-Q124]

PSE-Strata無料認定試験材料はこちらの224問題 [Q105-Q124]

Share

PSE-Strata無料認定試験材料はこちらの224問題

リアルPSE-Strataは100%カバー率リアル試験問題を試そう！


PSE-Strata試験に備えるには、候補者はネットワークセキュリティの概念と技術に強い基盤を持っている必要があります。ネットワークセキュリティソリューションの設計と展開、およびネットワークセキュリティの問題の管理とトラブルシューティングの経験が必要です。候補者は、Palo Alto Networksのトレーニングコースや学習資料を利用して試験の準備をすることもできます。

 

質問 # 105
What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

  • A. Increased security due to scalable cloud delivered security Services (CDSS)
  • B. operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)
  • C. Cost savings due to reduction in IT management effort and device
  • D. improved revenue due to more efficient network traffic throughput

正解：A、C、D


質問 # 106
A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

  • A. Remediates the event by deleting the malicious file
  • B. Notifies the user about the event
  • C. Informs WildFire and sends up a signature to the Cloud
  • D. Communicates the status of the endpoint to the ESM
  • E. Collects forensic information about the event

正解：B、D、E

解説：
Explanation
https://investors.paloaltonetworks.com/node/11156/html


質問 # 107
What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

  • A. discard the request and all subsequent responses
  • B. block the query
  • C. temporarily disable the DNS Security function
  • D. allow the request and all subsequent responses

正解：D


質問 # 108
In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two.)

  • A. Device count is under 100
  • B. Appliance needs to be moved into data center
  • C. Logs per second exceed 10,000
  • D. Dedicated Logger Mode is required

正解：C、D


質問 # 109
A prospective customer wants to purchase a next-generation firewall (NGFW) and requires at least 2 million concurrent sessions with a minimum of 10Gbps of throughput with threat detection enabled.
Which tool will help quickly determine the correct size of NGFW for this customer?

  • A. Product Comparison tool available on the Palo Alto Networks website
  • B. NGFW sizing app available for iOS and Android devices
  • C. Quoting tool available on the Palo Alto Networks website
  • D. Data Lake Calculator available on the Palo Alto Networks website

正解：A


質問 # 110
Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)

  • A. Objects Tab
  • B. Policies Tab
  • C. Network Tab
  • D. Device Tab

正解：C、D

解説：
https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/panorama-web-interface/panorama-templates/template-stacks


質問 # 111
Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

  • A. WildFire on the firewall, and AutoFocus on Panorama
  • B. GlobalProtect on the firewall, and Threat Prevention on Panorama
  • C. URL Filtering on the firewall, and MindMeld on Panorama
  • D. Threat Prevention on the firewall, and Support on Panorama

正解：D


質問 # 112
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)

B)

C)

D)

  • A. Option
  • B. Option
  • C. Option
  • D. Option

正解：A

解説：
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task


質問 # 113
When having a customer pre-sales call, which aspects of the NGFW should be covered?

  • A. The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
  • B. Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing
  • C. The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor
  • D. The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content --malware, phishing, and C2 are updated every five minutes --to ensure that you can manage access to these sites within minutes of categorization

正解：B

解説：
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/url-filtering


質問 # 114
Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server?
(Choose three.)

  • A. Event Log Readers
  • B. Distributed COM Users
  • C. Enterprise Administrators
  • D. Domain Administrators
  • E. Server Operator

正解：A、D、E

解説：
Explanation
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/user-identification/device-user-identific


質問 # 115
Which two components must to be configured within User-ID on a new firewall that has been implemented? (Choose two.)

  • A. Proxy Authentication
  • B. 802.1X Authentication
  • C. User mapping
  • D. Group Mapping

正解：C、D

解説：
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/enable-user-id


質問 # 116
What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

  • A. Monitor update announcements and manually push updates to Crewall
  • B. Use dynamic updates with the most aggressive schedule required by business needs
  • C. Store updates on an intermediary server and point all the firewalls to it
  • D. Run a Perl script to regularly check for updates and alert when one is released

正解：B


質問 # 117
What two advantages of the DNS Sinkholing feature? (Choose two)

  • A. It can work upstream from the internal DNS server.
  • B. It can be deployed independently of an Anti-Spyware Profile.
  • C. It is forging DNS replies to known malicious domains.
  • D. It is monitoring DNS requests passively for malware domains.

正解：A、C

解説：
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/threat-prevention/dns- sinkholing


質問 # 118
Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)

  • A. The management interface has an IP address of 192.168.1.1 and allows SSH and HTTPS connections.
  • B. The interfaces are pingable.
  • C. The devices are licensed and ready for deployment.
  • D. The devices are pre-configured with a virtual wire pair out the first two interfaces.
  • E. A default bidirectional rule is configured that allows Untrust zone traffic to go to the Trust zone.

正解：A、D

解説：
https://popravak.wordpress.com/2014/07/31/initial-setup-of-palo-alto-networks-next-generation- firewall/


質問 # 119
Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)

B)

C)

D)

  • A. Option
  • B. Option
  • C. Option
  • D. Option

正解：A

解説：
Explanation
https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/troubleshooting/use-cli-commands-for-sd-wan-task


質問 # 120
To connect the Palo Alto Networks firewall to AutoFocus, which setting must be enabled?

  • A. Device>Setup>Services>AutoFocus
  • B. Device>Setup> Management> Logging and Reporting Settings
  • C. Device>Setup>WildFire>AutoFocus
  • D. AutoFocus is enabled by default on the Palo Alto Networks NGFW
  • E. Device> Setup>Management >AutoFocus

正解：E


質問 # 121
What are two presales selling advantages of using Expedition? (Choose two.)

  • A. streamline & migrate to Layer7 policies using Policy Optimizer
  • B. easy migration process to move to Palo Alto Networks NGFWs
  • C. reduce effort to implement policies based on App-ID and User-ID
  • D. map migration gaps to professional services statement of Works (SOWs)

正解：B、D


質問 # 122
How many recursion levels are supported for compressed files in PAN-OS 8.0?

  • A. 0
  • B. 1
  • C. 2
  • D. 3

正解：D


質問 # 123
What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

  • A. Self-Signed certificates
  • B. Enterprise CA-signed certificates
  • C. Intermediate certificates
  • D. Private key certificates

正解：A、B


質問 # 124
......

PSE-Strata試験問題集簡単なまとめ：https://www.passtest.jp/Palo-Alto-Networks/PSE-Strata-shiken.html

PSE-Strata最新Palo Alto Networks Systems Engineerトレーニングと認定をゲット：https://drive.google.com/open?id=1RgDTfb-T_L-qxEKyaKaXly26Exa-_s9E

関するブログ

もっと
PSE-Strata 無料問題集