あなたを合格させるSASE Professional PSE-SASE試験問題集で2023年05月07日には67問あります
PSE-SASE無料試験学習ガイド！（更新された67問あります)
質問 17
In the aggregate model, how are bandwidth allocations and interface tags applied beginning in Prisma Access
1.8?
- A. License bandwidth is allocated to a Prisma Access location; interface tags are set with a compute region.
- B. License bandwidth is allocated to a compute region; interface tags are set with a Prisma Access location.
- C. License bandwidth is allocated to a compute region; interface tags are set with a CloudGenix controller.
- D. License bandwidth is allocated to a CloudGenix controller; interface tags are set with a compute region.
正解: B
質問 18
Which product continuously monitors each segment from the endpoint to the application and identifies baseline metrics for each application?
- A. Autonomous Digital Experience Management (ADEM)
- B. CloudBlades
- C. WildFire
- D. App-ID Cloud Engine (ACE)
正解: A
質問 19
Which element of Prisma Access enables both mobile users and users at branch networks to access resources in headquarters or a data center?
- A. User-ID
- B. private clouds
- C. service connections
- D. App-ID
正解: C
質問 20
What are two ways service connections and remote network connections differ? (Choose two.)
- A. Remote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.
- B. Service connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.
- C. An on-premises resource cannot originate a connection to the internet over a service connection.
- D. Remote network connections enforce security policies, but service connections do not.
正解: A
質問 21
What is an advantage of the Palo Alto Networks cloud-based security infrastructure?
- A. It allows for the elimination of data centers within five years of implementation.
- B. It backhauls traffic to the corporate network.
- C. It provides comprehensive, scalable cloud security with flexible licensing options.
- D. It increases the footprint of the security solution.
正解: C
質問 22
In an SD-WAN deployment, what allows customers to modify resources in an automated fashion instead of logging on to a central controller or using command-line interface (CLI) to manage all their configurations?
- A. dynamic user group (DUG)
- B. DNS server
- C. WildFire
- D. application programming interface (API)
正解: A
質問 23
The Cortex Data Lake sizing calculator for Prisma Access requires which three values as inputs? (Choose three.)
- A. retention period for the logs to be stored
- B. number of mobile users purchased
- C. number of log-forwarding destinations
- D. cloud-managed or Panorama-managed deployment
- E. throughput of remote networks purchased
正解: A,B,E
質問 24
Which product draws on data collected through PAN-OS device telemetry to provide an overview of the health of an organization's next-generation firewall (NGFW) deployment and identify areas for improvement?
- A. Device Insights
- B. security information and event management (SIEM)
- C. DNS Security
- D. Cloud Identity Engine (CIE)
正解: A
質問 25
A customer currently has 150 Mbps of capacity at a site. Records show that, on average, a total of 30 Mbps of bandwidth is used for the two links.
What is the appropriate Prisma SD-WAN license for this site?
- A. 250 Mbps
- B. 175 Mbps
- C. 50 Mbps
- D. 25 Mbps
正解: C
質問 26
In which step of the Five-Step Methodology of Zero Trust are application access and user access defined?
- A. Step 4: Create the Zero Trust Policy
- B. Step 5: Monitor and Maintain the Network
- C. Step 3: Architect a Zero Trust Network
- D. Step 1: Define the Protect Surface
正解: A
質問 27
What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices?
(Choose two.)
- A. control mode insertion without modification of existing network configuration
- B. ensures automatic failover when ION devices experience software or network related failure
- C. local area network (LAN) Dynamic Host Configuration Protocol (DHCP) and DHCP relay functionality
- D. network controller communication and monitoring
正解: B
質問 28
Which three decryption methods are available in a security processing node (SPN)? (Choose three.)
- A. SSH Inbound Inspection
- B. SSL Outbound Proxy
- C. SSHv2 Proxy
- D. SSL Forward Proxy
- E. SSL Inbound Inspection
正解: C,D,E
質問 29
Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?
- A. >show sdwan event
- B. >show sdwan connection all |
- C. >show sdwan path-monitor stats vif
- D. >show sdwan session distribution policy-name
正解: A
質問 30
Which connection method allows secure web gateway (SWG) access to internet-based SaaS applications using HTTP and HTTPS protocols?
- A. GlobalProtect
- B. system-wide proxy
- C. Broker VM
- D. explicit proxy
正解: A
質問 31
What allows enforcement of policies based on business intent, enables dynamic path selection, and provides visibility into performance and availability for applications and networks?
- A. Identity Access Management (IAM) methods
- B. Firewall as a Service (FWaaS)
- C. Cloud Access Security Broker (CASB)
- D. Instant-On Network (ION) devices
正解: B
質問 32
What is a benefit of the Palo Alto Networks secure access service edge (SASE) solution's ability to provide insight into SD-WAN and network security metrics while highlighting critical issues across all managed tenants?
- A. It simplifies workflows and instantly automates common use cases with hundreds of prebuilt playbooks.
- B. It helps protect inbound, outbound, and east-west traffic between container workload types in Kubernetes environments without slowing development speed.
- C. It helps managed service providers (MSPs) accelerate troubleshooting and meet service level agreements (SLAs) for all their customers.
- D. It rearchitects the way signatures are delivered, performing updates and streaming them to the firewall within seconds after the analysis is done.
正解: C
質問 33
Which statement applies to Prisma Access licensing?
- A. It is a perpetual license required to enable support for multiple virtual systems on PA-3200 Series firewalls.
- B. It provides cloud-based, centralized log storage and aggregation.
- C. Internet of Things (IOT) Security is included with each license.
- D. For remote network and Clean Pipe deployments, a unit is defined as 1 Mbps of bandwidth.
正解: D
質問 34
How does SaaS Security Inline provide a consistent management experience?
- A. user credentials required before accessing the resource
- B. automatically forwards samples for WildFire analysis
- C. integrates with existing security
- D. uses advanced predictive analysis and machine learning (ML)
正解: C
質問 35
What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?
- A. Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.
- B. Users, devices, and apps are identified no matter where they connect from.
- C. Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.
- D. Complexity of connecting to a gateway is increased, providing additional protection.
正解: B
質問 36
How does Autonomous Digital Experience Management (ADEM) improve user experience?
- A. It applies in-depth hunting and forensics knowledge to identify and contain threats before they become a breach.
- B. Working from home or branch offices, all users get the benefit of a digital experience management solution without the complexity of installing additional software and hardware.
- C. The root cause of any alert can be viewed with a single click, allowing users to swiftly stop attacks across the environment.
- D. The virtual appliance receives and stores firewall logs without using a local Log Collector, simplifying required steps users must take.
正解: B
質問 37
How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?
- A. It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.
- B. It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.
- C. It prevents credential theft by controlling sites to which users can submit their corporate credentials.
- D. It offers risk scoring, analytics, reporting, and Security policy rule authoring.
正解: A
質問 38
......
PSE-SASE問題集はSASE Professional認証済み試験問題と解答：https://jp.fast2test.com/PSE-SASE-premium-file.html
実際に出ると確認されたPSE-SASE試験問題集と解答でPSE-SASE無料更新：https://drive.google.com/open?id=1EJ3gtceN6bacDAgxpaGQQgRRNTWrBog_