PSE-Strata-Pro-24試験無料問題集（62題）「Palo Alto Networks Systems Engineer Professional

出題：1

A large global company plans to acquire 500 NGFWs to replace its legacy firewalls and has a specific requirement for centralized logging and reporting capabilities.
What should a systems engineer recommend?

A. Combine Panorama for firewall management with Palo Alto Networks' cloud-based Strata Logging Service to offer scalability for the company's logging and reporting infrastructure.

B. Deploy a pair of M-1000 log collectors in the customer data center, and route logs from all 500 firewalls to the log collectors for centralized logging and reporting.

C. Use Panorama for firewall management and to transfer logs from the 500 firewalls directly to a third- party SIEM for centralized logging and reporting.

D. Highlight the efficiency of PAN-OS, which employs AI to automatically extract critical logs and generate daily executive reports, and confirm that the purchase of 500 NGFWs is sufficient.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What is the minimum configuration to stop a Cobalt Strike Malleable C2 attack inline and in real time?

A. Threat Prevention and Advanced WildFire with PAN-OS 10.0

B. DNS Security, Threat Prevention, and Advanced WildFire with PAN-OS 9.x

C. Advanced Threat Prevention and PAN-OS 10.2

D. Next-Generation CASB on PAN-OS 10.1

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Device-ID can be used in which three policies? (Choose three.)

A. Policy-based forwarding (PBF)

B. Quality of Service (QoS)

C. SD-WAN

D. Security

E. Decryption

正解：B,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

A company plans to deploy identity for improved visibility and identity-based controls for least privilege access to applications and data. The company does not have an on-premises Active Directory (AD) deployment, and devices are connected and managed by using a combination of Entra ID and Jamf.
Which two supported sources for identity are appropriate for this environment? (Choose two.)

A. Captive portal

B. User-ID agents configured for WMI client probing

C. Cloud Identity Engine synchronized with Entra ID

D. GlobalProtect with an internal gateway deployment

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A prospective customer is interested in Palo Alto Networks NGFWs and wants to evaluate the ability to segregate its internal network into unique BGP environments.
Which statement describes the ability of NGFWs to address this need?

A. It cannot be addressed because PAN-OS does not support it.

B. It cannot be addressed because BGP must be fully meshed internally to work.

C. It can be addressed with BGP confederations.

D. It can be addressed by creating multiple eBGP autonomous systems.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

When a customer needs to understand how Palo Alto Networks NGFWs lower the risk of exploitation by newly announced vulnerabilities known to be actively attacked, which solution and functionality delivers the most value?

A. Advanced URL Filtering uses machine learning (ML) to learn which malicious URLs are being utilized by the attackers, then block the resulting traffic.

B. WildFire loads custom OS images to ensure that the sandboxing catches any activity that would affect the customer's environment.

C. Advanced Threat Prevention's command injection and SQL injection functions use inline deep learning against zero-day threats.

D. Single Pass Architecture and parallel processing ensure traffic is efficiently scanned against any enabled Cloud-Delivered Security Services (CDSS) subscription.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

PSE-Strata-Pro-24試験無料問題集「Palo Alto Networks Systems Engineer Professional - Hardware Firewall 認定」