PSE-SoftwareFirewall試験無料問題集（67題）「Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional 認定」

出題：1

What is a benefit of network runtime security?

A. It identifies unknown vulnerabilities that cannot be identified by known Common Vulnerability and Exposure (CVE) lists.

B. It is siloed to enhance workload security.

C. It removes vulnerabilities that have been baked into containers.

D. It more narrowly focuses on one security area and requires careful customization, integration, and maintenance.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which two steps are involved in deployment of a VM-Series firewall on NSX? (Choose two.)

A. Create a virtual data center (vDC) and a vApp that includes the VM-Series firewall.

B. Enable communication between Panorama and the NSX Manager.

C. Obtain the Amazon Machine Images (AMIs) from marketplace.

D. Register the VM-Series firewall as a service.

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which solution is best for securing an EKS environment?

A. CN-Series high availability (HA) pair

B. PA-Series using load sharing

C. VM-Series single host

D. API orchestration

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

A. Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.

B. Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).

C. Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.

D. Edit the IP address of all of the affected VMs.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which of the following can provide application-level security for a web-server instance on Amazon Web Services (AWS)?

A. Hardware firewalls

B. Security groups

C. Terraform templates

D. VM-Series firewalls

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

How does a CN-Series firewall prevent exfiltration?

A. It distributes incoming virtual private cloud (VPC) traffic across the pool of VM-Series firewalls.

B. It employs custom-built signatures based on hash.

C. It provides a license deactivation API key.

D. It inspects outbound traffic content and blocks suspicious activity.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)

A. Multiple authorization codes

B. Security groups

C. Steering rules

D. Security group assignment of virtual machines (VMs)

E. User IP mappings

正解：C,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

PSE-SoftwareFirewall試験無料問題集「Palo Alto Networks Systems Engineer (PSE): Software Firewall Professional 認定」