リアルCyberSec-Apprentice試験PDFテストエンジン 練習テスト問題
Palo Alto Networks CyberSec-Apprenticeリアル2026年最新のブレーン問題集で模擬試験問題集
質問 # 61
What are two characteristics of data loss prevention (DLP)? (Choose two.)
- A. File-level encryption
- B. Content-aware
- C. Key logging
- D. Traffic shaping
正解：A、B
解説：
File-level encryption protects sensitive data by securing files from unauthorized access.
Content-aware capability enables DLP to inspect and identify sensitive information based on its content to prevent unauthorized transmission.
質問 # 62
Which attack takes place in the Exploitation phase of the cyber attack lifecycle?
- A. Polymorphic malware altering its structure on a target after gaining access
- B. Malicious phishing link sent to a target
- C. Undisclosed software vulnerability used to gain remote access to a target
- D. Weaponized PDF file executing on a target
正解：C
解説：
During the Exploitation phase, attackers take advantage of software vulnerabilities to gain unauthorized access or execute malicious code on the target system.
質問 # 63
Which cloud computing model is appropriate for a company that requires an isolated environment which meets strict compliance requirements and maintains enhanced security?
- A. Community
- B. Private
- C. Public
- D. Hybrid
正解：B
解説：
A private cloud provides an isolated and dedicated environment, offering enhanced security and control, making it ideal for organizations with strict compliance and data protection requirements.
質問 # 64
Which traffic characteristic is used by VLANs to segment traffic?
- A. Protocol
- B. Identity
- C. Tag
- D. MAC address
正解：C
解説：
VLANs use tags - specifically IEEE 802.1Q tags - to identify and segment network traffic, allowing devices on different VLANs to remain logically separated even on the same physical network.
質問 # 65
Which cloud service model allows a third-party provider to host an application that is readily available for customer use?
- A. Infrastructure as a service (IaaS)
- B. Desktop as a service (DaaS)
- C. Platform as a service (PaaS)
- D. Software as a service (SaaS)
正解：D
解説：
Software as a Service (SaaS) delivers fully managed applications hosted by a third-party provider, allowing customers to access and use the software over the internet without managing infrastructure or application maintenance.
質問 # 66
Which type of attack involves employees using their credentials to copy proprietary software onto an external drive?
- A. Insider threat
- B. Identity theft
- C. Spear phishing
- D. Social engineering
正解：A
質問 # 67
Which scenario is an example of a DDoS attack?
- A. A malicious payload is concealed in a file.
- B. A target overwhelmed by a flood of traffic.
- C. An email with a malicious attachment is sent.
- D. Information is extracted without host knowledge.
正解：B
解説：
A Distributed Denial-of-Service (DDoS) attack occurs when multiple systems flood a target with excessive traffic, overwhelming its resources and disrupting normal service availability.
質問 # 68
Which device reads information from packets at the application layer of the OSI model to determine if traffic should be forwarded?
- A. Router
- B. Next-generation firewall
- C. WAN accelerator
- D. Switch
正解：B
解説：
A next-generation firewall (NGFW) operates at the application layer, inspecting packet contents and application data to make intelligent forwarding and blocking decisions based on security policies.
質問 # 69
Which security control examines network traffic and allows or blocks connections according to predefined organizational security policies and rules?
- A. Router
- B. Access Point
- C. Switch
- D. Firewall
正解：D
解説：
A firewall monitors incoming and outgoing network traffic and enforces security policies. It helps prevent unauthorized access while allowing approved communications between trusted users and systems.
質問 # 70
What does an exploit take advantage of?
- A. Event
- B. Threat actor
- C. Vulnerability
- D. Alert
正解：C
解説：
An exploit takes advantage of a vulnerability - a flaw or weakness in software, hardware, or configuration - to execute malicious actions or gain unauthorized access.
質問 # 71
Which event would generate a false positive alert?
- A. A network sensor is unable to identify a custom application.
- B. A firewall categorizes a benign application as malicious.
- C. An employee attempts to access an unauthorized application.
- D. A network tunnel accidentally switches from one route to another.
正解：B
解説：
A false positive occurs when a security system incorrectly identifies legitimate activity as malicious, such as a firewall flagging a benign application as a threat.
質問 # 72
Which pillar should a company focus on first when establishing a new security operations department?
- A. Processes
- B. Business
- C. People
- D. Technology
正解：C
解説：
When establishing a new security operations department, the first focus should be on people, as skilled personnel are essential to effectively manage security technologies and implement operational processes.
質問 # 73
Which device reads conformation from packets at the application layer of the OSI model to determine if traffic should be forwarded?
- A. Router
- B. Next-generation firewall
- C. WAN accelerator
- D. Switch
正解：B
解説：
A next-generation firewall (NGFW) operates at the application layer of the OSI model, inspecting packet contents and application signatures to determine whether traffic should be allowed or blocked.
質問 # 74
Which duties are part of a triage analyst role in security operations?
- A. Providing detailed threat intelligence reports and recommendations for remediation
- B. Identifying the source, scope, and impact of an incident
- C. Supporting only the most complex incident responses and reviewing forensic and telemetry data for threats
- D. Proactively hunting for threats, vulnerabilities, and exploits
正解：B
解説：
A triage analyst's role in security operations involves identifying the source, scope, and impact of an incident to determine its severity and prioritize response actions.
質問 # 75
What is a benefit of SD-WAN versus traditional WANs?
- A. Administrators can deploy WAN connection policies across an entire network at once.
- B. Reliance on multiple different WAN connection types and licenses is removed.
- C. WANs are physically connected and strengthened against electromagnetic interference.
- D. All physical WAN components can be easily removed and replaced without network disruption.
正解：A
解説：
SD-WAN allows centralized management, enabling administrators to deploy and enforce WAN connection policies across the entire network simultaneously, improving agility and consistency.
質問 # 76
What are two internet of things (IoT) devices? (Choose two.)
- A. Router
- B. Laptop
- C. Patient imaging machine
- D. Security camera
正解：C、D
解説：
Security cameras and patient imaging machines are IoT devices because they connect to networks to transmit data and can be remotely monitored or controlled.
質問 # 77
......
最速準備で試験合格！CyberSec-Apprentice問題の事前予備：https://jp.fast2test.com/CyberSec-Apprentice-premium-file.html