SSE-Engineer試験無料問題集（54題）「Palo Alto Networks Security Service Edge Engineer 認定」

出題：1

A customer is implementing Prisma Access (Managed by Strata Cloud Manager) to connect mobile users, branch locations, and business-to- business (B2B) partners to their data centers.
The solution must meet these requirements:
The mobile users must have internet filtering, data center connectivity, and remote site connectivity to the branch locations.
The branch locations must have internet filtering and data center connectivity.
The B2B partner connections must only have access to specific data center internally developed applications running on non-standard ports.
The security team must have access to manage the mobile user and access to branch locations.
The network team must have access to manage only the partner access.
Which two options will allow the engineer to support the requirements? (Choose two.)

A. Enable Remote Networks Advertise Default Route.

B. Enable eBGP for dynamic routing and configure RemoteNetworks.

C. Configure the CPE with Static Routes pointing to Prisma Access Infrastructure and Mobile User routes.

D. Configure Remote Networks and define the branch IP subnets using Static Routes.

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A malicious user is attempting to connect to a blocked website by crafting a packet using a fake SNI and the correct website in the HTTP host header.
Which option will prevent this form of attack?

A. Advanced URL Filtering and block "SNI mismatch with Server Certificate (SAN/CN)"

B. SSL Decryption to "Block sessions on SNI mismatch with Server Certificate (SAN/CN)"

C. Advanced Threat Prevention option to block "Domain Fronting"

D. Advanced URL Filtering and block the "Malicious Behavior" category

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which advanced AI-powered functionality does Strata Copilot provide to enhance the capabilities of Prisma Access security teams?

A. Initial configuration of Prisma Access using a natural language interface

B. Automated remediation of misconfigured security policies

C. Real-time traffic analysis for automated threat prevention

D. Customized guidance for resolving issues through recommended next steps

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

An engineer configures User-ID redistribution from an on-premises firewall connected to Prisma Access (Managed by Panorama) using a service connection. After committing the configuration, traffic from remote network connections is still not matching the correct user-based policies.
Which two configurations need to be validated? (Choose two.)

A. Ensure the Remote_Network_Template is selected when adding the User-ID Agent in Panorama.

B. Ensure the Service_Conn_Template is selected when adding the User-ID Agent in Panorama.

C. Confirm the Collector Pre-Shared Keys match between Prisma Access and the on-premises firewall.

D. Confirm there is a Security policy configured in Prisma Access to allow the communication on port
5007.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which feature will fetch user and group information to verify whether a group from the Cloud Identity Engine is present on a security processing node (SPN)?

A. User Activity Insights

B. SASE Health Dashboard

C. Region Activity Insights

D. Prisma Access Locations

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

SSE-Engineer試験無料問題集「Palo Alto Networks Security Service Edge Engineer 認定」