[2023年最新] 完璧PSE-Strata問題集問題と解答で一年無料最速更新
更新されたのは2023年リアルな無敵PSE-Strata問題集で100% 無料PSE-Strata試験問題集
質問 # 38
What filtering criteria is used to determine what users to include as members of a dynamic user group?
- A. Tags
- B. Security Policy Rules
- C. IP Addresses
- D. Login IDs
正解：A
解説：
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic- user-groups
質問 # 39
A client chooses to not block uncategorized websites.
Which two additions should be made to help provide some protection? (Choose two.)
- A. A file blocking profile to security policy rules that allow uncategorized websites to help reduce the risk of drive by downloads
- B. A data filtering profile with a custom data pattern to security policy rules that deny uncategorized websites
- C. A security policy rule using only known URL categories with the action set to allow
- D. A URL filtering profile with the action set to continue for unknown URL categories to security policy rules that allow web access
正解：C、D
質問 # 40
Which four steps of the cyberattack lifecycle does the Palo Alto Networks Security Operating Platform prevent? (Choose four.)
- A. lateral movement
- B. deliver the malware
- C. exfiltrate data
- D. weaponize vulnerabilities
- E. breach the perimeter
- F. recon the target
正解：A、B、C、E
質問 # 41
An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?
- A. DNS Sinkholing
- B. Anti-Spyware Signatures
- C. DNS Proxy
- D. Wildfire Analysis
正解：A
質問 # 42
Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)
- A. The management interface has an IP address of 192.168.1.1 and allows SSH and HTTPS connections.
- B. The interfaces are pingable.
- C. The devices are pre-configured with a virtual wire pair out the first two interfaces.
- D. A default bidirectional rule is configured that allows Untrust zone traffic to go to the Trust zone.
- E. The devices are licensed and ready for deployment.
正解：A、C
解説：
https://popravak.wordpress.com/2014/07/31/initial-setup-of-palo-alto-networks-next-generation- firewall/
質問 # 43
Which two products are included in the Prisma Brand? (Choose two.)
- A. Panorama
- B. Prisma Cloud Enterprise
- C. NGFW
- D. Prisma Cloud Compute
正解：B、D
解説：
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin- compute/welcome/pcee_vs_pcce.html
質問 # 44
You have enabled the WildFire ML for PE files in the antivirus profile and have added the profile to the appropriate firewall rules. When you go to Palo Alto Networks WildFire test av file and attempt to download the test file it is allowed through. In order to verify that the machine learning is working from the command line, which command returns a valid result?
- A. show wfml cloud-status
- B. show ml cloud-status
- C. show wfav cloud-status
- D. show mlav cloud-status
正解：D
質問 # 45
In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two.)
- A. Dedicated Logger Mode is required
- B. Device count is under 100
- C. Appliance needs to be moved into data center
- D. Logs per second exceed 10,000
正解：A、D
質問 # 46
Drag and Drop Question
Match the WildFire Inline Machine Learning Model to the correct description for that model.
正解：
解説：
Explanation:
https://docs.paloaltonetworks.com/wildfire/u-v/wildfire-whats-new/wildfire-features-in-panos-
100/configure-wildfire-inline-ml.html
質問 # 47
What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)
- A. Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
- B. Next-generation firewalls deployed with WildFire Analysis Security Profiles
- C. Correlation Objects generated by AutoFocus
- D. WF-500 configured as private clouds for privacy concerns
- E. Palo Alto Networks non-firewall products such as Traps and Prisma SaaS
正解：A、C、E
質問 # 48
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)
- A. ELF
- B. RAR
- C. 7-Zip
- D. Zip
正解：B、C
解説：
https://docs.paloaltonetworks.com/wildfire/9-0/wildfire-admin/wildfire-overview/wildfire-file-type-support
質問 # 49
Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?
- A. Access to the WildFire API
- B. PE file upload to WildFire
- C. five-minute WildFire updates
- D. WildFire hybrid deployment
正解：A
質問 # 50
A company has deployed the following
* VM-300 firewalls in AWS
* endpoint protection with the Traps Management Service
* a Panorama M-200 for managing its VM-Series firewalls
* PA-5220s for its internet perimeter,
* Prisma SaaS for SaaS security.
Which two products can send logs to the Cortex Data Lake? (Choose two).
- A. Panorama M-200 appliance
- B. Traps Management Service
- C. Prisma SaaS
- D. VM-300 firewalls
正解：A、D
質問 # 51
Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)
- A. Objects Tab
- B. Policies Tab
- C. Network Tab
- D. Device Tab
正解：C、D
質問 # 52
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)
- A. Traps
- B. Panorama
- C. Cortex Data Lake
- D. Pathfinder
- E. NGFW with PANOS 8 0.5 or later
- F. Directory Syn Service
正解：C、E、F
解説：
https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-prevent-admin/cortex-xdr-prevent-overview/cortex-xdr-prevent-architecture
質問 # 53
Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)
- A. Create a vulnerability protection profile to block all the vulnerabilities with severity low and higher
- B. Create an antivirus profile to block all content that matches and antivirus signature
- C. Create an anti-spyware profile to block all spyware
- D. Create an SSL Decryption policy to decrypt 100% of the traffic
- E. Create a WildFire profile to schedule file uploads during low network usage windows
正解：A、D、E
質問 # 54
Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?
- A. infected hosts connecting to the Sinkhole Internet Protocol (IP) address can be identified in the traffic logs
- B. It requires a Sinkhole license in order to activate
- C. DNS sinkholing signatures are packaged and delivered through Vulnerability Protection updates
- D. it requires the Vulnerability Protection profile to be enabled
正解：A
質問 # 55
When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?
- A. HTTP method
- B. X-Forwarded-For
- C. Content type
- D. HTTP response status code
正解：B
解説：
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/url-filtering/http-header-logging
質問 # 56
The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTP decoder for URL filtering is handled by which component in the NGFW?
- A. First Packet Processor
- B. Stream-based Signature Engine
- C. Security Processing Engine
- D. SIA (Scan It All) Processing Engine
正解：B
解説：
https://media.paloaltonetworks.com/documents/Single_Pass_Parallel_Processing_Architecture.p dfn (page 6)
質問 # 57
A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)
- A. Informs WildFire and sends up a signature to the Cloud
- B. Communicates the status of the endpoint to the ESM
- C. Collects forensic information about the event
- D. Remediates the event by deleting the malicious file
- E. Notifies the user about the event
正解：B、C、E
解説：
Explanation
https://investors.paloaltonetworks.com/node/11156/html
質問 # 58
Which two products can send logs to the Cortex Data Lake? (Choose two.)
- A. PA-3260 firewall
- B. Prisma Access
- C. Prisma Public Cloud
- D. AutoFocus
正解：A、B
解説：
Explanation
https://docs.paloaltonetworks.com/cortex/cortex-data-lake/cortex-data-lake-getting-started/get-started-with-corte
質問 # 59
What action would address the sub-optimal traffic path shown in the figure?
Key:
RN -Remote Network
SC -Service Connection
MU GW -Mobile User Gateway
- A. Onboard a Service Connection in the Americas region
- B. Onboard a Remote Network location in the EMEA region
- C. Onboard a Service Connection in the APAC region
- D. Remove the Service Connection in the EMEA region
正解：C
質問 # 60
A customer has business-critical applications that rely on the general web-browsing application. Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?
- A. File Blocking Profile
- B. Vulnerability Protection Profile
- C. URL Filtering Profile
- D. DoS Protection Profile
正解：A
解説：
Reference:
%2Fknowledgebase.paloaltonetworks.com%2Fservlet%2FfileField%3FentityId%3Dka10g000000U0roAAC%26field%3DAttachment_1__Body__s&usg=AOvVaw3DCBM7-FwWInkWYANLrzUt (32)
質問 # 61
A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today's security infrastructure.
Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?
- A. GlobalProtect
- B. Threat Prevention
- C. SP3 (Single Pass Parallel Processing)
- D. Elastic Load Balancers
正解：C
解説：
https://www.paloguard.com/SP3-Architecture.asp
質問 # 62
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)
- A. identify sanctioned and unsanctioned SaaS applications
- B. expose the visibility and presence of command-and-control sessions
- C. use of decryption policies
- D. measure the adoption of URL filters. App-ID. User-ID
- E. use of device management access and settings
正解：A、C、D
質問 # 63
......
PSE-Strata問題集PDFとテストエンジン試験問題：https://jp.fast2test.com/PSE-Strata-premium-file.html
Get2023年最新の無料更新されたPalo Alto Networks PSE-Strata試験問題と解答：https://drive.google.com/open?id=1bt_-mkadwMnLFIPAfgwVrEgw61_bqDBR