PCSFE試験無料問題集（67題）「Palo Alto Networks Certified Software Firewall Engineer 認定」

出題：1

Which service, when enabled, provides inbound traffic protection?

A. DNS Security

B. Advanced URL Filtering (AURLF)

C. Threat Prevention

D. Data loss prevention (DLP)

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

A. Edit the IP address of all of the affected VMs. www*

B. Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.

C. Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).

D. Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Why are containers uniquely suitable for runtime security based on allow lists?

A. Developers define the processes used in containers within the Dockerfile.

B. Docker has a built-in runtime analysis capability to aid in allow listing.

C. Containers have only a few defined processes that should ever be executed.

D. Operations teams know which processes are used within a container.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

What is the structure of the YAML Ain't Markup Language (YAML) file repository?

A. Kubernetes/Environment/Deplovment Type

B. Deployment Type/Kubernetes/Environment

C. Environment/Kubernetes/Deployment Type

D. Kubernetes/Deployment Type/Environment

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

What is a benefit of CN-Series firewalls securing traffic between pods and other workload types?

A. It allows extension of Zero Trust Network Security to the most remote locations and smallest branches.

B. It allows for automatic deployment, provisioning, and immediate policy enforcement without any manual intervention.

C. It protects data center and internet gateway deployments.

D. It ensures consistent security across the entire environment.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which two methods of Zero Trust implementation can benefit an organization? (Choose two.)

A. Compliance is validated.

B. Boundaries are established.

C. Security automation is seamlessly integrated.

D. Access controls are enforced.

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?

A. WildFire

B. Secure Sockets Layer (SSL) Inbound Inspection

C. Advanced URL Filtering (AURLF)

D. OCSP

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

PCSFE試験無料問題集「Palo Alto Networks Certified Software Firewall Engineer 認定」