[2022年12月03日] 最新版を今すぐ試そうPSE-Strata-Associate練習テスト問題解答
PSE-Strata-Associate問題集と試験テストエンジン
質問 10
What is a technical benefit of User-ID in relation to policy control?
- A. It matches traffic against policy to check whether it is allowed on the network.
- B. It allows all users to designate view-only access to itinerant personnel.
- C. It encrypts all private keys and passwords in the configuration.
- D. It improves safe enablement of applications traversing the network.
正解: B
質問 11
Which three of the following are features of the Palo Alto Networks Next-Generation Firewall (NGFW) that differentiate it from a stateful inspection firewall? (Choose three.) Select 3 Correct Responses
- A. SSL/SSH Decrypt
- B. User-ID
- C. Network-ID
- D. App-ID
- E. Login-ID
正解: A,B,D
質問 12
The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and received from this website.
Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?
- A. Forward Proxy
- B. Inbound Proxy
- C. Web Proxy
- D. Certificate Proxy
正解: A
質問 13
Which traffic will be blocked when application-default service is set on a Security policy?
- A. DNS traffic on UDP/53
- B. HTTP traffic on TCP/81
- C. SSH traffic on TCP/22
- D. HTTPS traffic on TCP/443
正解: B
質問 14
A customer interested in Panorama is concerned about managing multiple firewalls they are putting in place globally. Each location has its own IP addresses, zones, and VPN configurations.
Which element of Panorama will assist the customer in pushing this unique configuration information to the individual firewalls?
- A. templates
- B. device profile
- C. device groups
- D. GlobalProtect
正解: A
質問 15
Which three key functions are processed as part of the Palo Alto Networks single-pass architecture (SPA)?
(Choose three.)
Select 3 Correct Responses
- A. Device-ID
- B. User-ID
- C. Virus-ID
- D. Content-ID
- E. Intruder-ID
正解: A,B,D
質問 16
Which two of the following are benefits of the Palo Alto Networks Zero Trust architecture? (Choose two.) Select 2 Correct Responses
- A. cloud-based virtual private network (VPN)
- B. tighter access control
- C. increased detection of threats and infiltration
- D. more network segments
正解: B,C
質問 17
The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?
- A. DHCP groups
- B. security profile groups
- C. security zones
- D. LLDP profiles
正解: C
質問 18
Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?
- A. multi-pass
- B. multiple-core threaded
- C. single-pass
- D. no-pass
正解: C
質問 19
A firewall enabled as a decryption broker will take which of the following actions?
- A. forward clear text traffic to security chains for additional enforcement
- B. monitor the state of active connections to determine which network packets to allow through
- C. identify potential denial-of-service (DoS) attacks and take protective action
- D. correlate a series of related threat events that indicate a likely compromised host on the network
正解: D
質問 20
Which of the following is an appropriate first step for a customer interested in moving to Zero Trust?
- A. Set priorities by identifying the most valuable and critical assets and data on their networks.
- B. Secure the funding required to incorporate the new architecture into their existing networks.
- C. Request a statement of compliance from their IT vendors against the Zero Trust standard.
- D. Ask administrators to switch on the Zero Trust options and features of their current products.
正解: C
質問 21
An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.
Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses
- A. Layer 2
- B. Virtual Wire
- C. Layer 3
- D. TAP mode
正解: B,C
解説:
Explanation
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClzkCAC
https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/ha-concepts/hamodes#id15a9d29
質問 22
Which architecture allows a Palo Alto Networks Next-Generation Firewall (NGFW) to achieve high performance with all security features enabled?
- A. parallel-pass single processing
- B. single-pass parallel processing
- C. multi-core processing
- D. dual-pass processing
正解: B
質問 23
Which two of the following are ways that Palo Alto Networks CloudDelivered Security Services (CDSS) use confidential information collected from users? (Choose two.) Select 2 Correct Responses
- A. legal compliance
- B. verification of entitlements
- C. verification of applicant statements
- D. attack retaliation attribution
正解: A,C
質問 24
......
2022年最新のFast2test PSE-Strata-AssociateのPDFで最近更新された問題です：https://jp.fast2test.com/PSE-Strata-Associate-premium-file.html
Palo Alto Networks PSE-Strata-Associate問題集にはリアル試験問題解答：https://drive.google.com/open?id=1eMs9hPZLborDgddoXt9Z1hOg7Z-3GQIb