PCNSE試験無料問題集「Palo Alto Networks Certified Network Security Engineer 認定」

ページ: 1 / 18
トータル 330 問
完全版を入手する
A company configures its WildFire analysis profile to forward any file type to the WildFire public cloud. A company employee receives an email containing an unknown link that downloads a malicious Portable Executable (PE) file.
What does Advanced WildFire do when the link is clicked?

解説: (GoShiken メンバーにのみ表示されます)
A network security engineer needs to ensure that virtual systems can communicate with one another within a Palo Alto Networks firewall. Separate virtual routers (VRs) are created for each virtual system.
In addition to confirming security policies, which three configuration details should the engineer focus on to ensure communication between virtual systems? (Choose three.)

正解：A,C,D 解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
An administrator is configuring a Panorama device group. Which two objects are configurable? (Choose two.)

Which three options does Panorama offer for deploying dynamic updates to its managed devices? (Choose three.)

正解：A,B,E 解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
An engineer is configuring a Protection profile to defend specific endpoints and resources against malicious activity.
The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet.
Which profile is the engineer configuring?

解説: (GoShiken メンバーにのみ表示されます)
An engineer needs to collect User-ID mappings from the company's existing proxies. What two methods can be used to pull this data from third-party proxies? (Choose two)

解説: (GoShiken メンバーにのみ表示されます)
Given the following snippet of a WildFire submission log did the end-user get access to the requested information and why or why not?

解説: (GoShiken メンバーにのみ表示されます)
A customer requires that virtual systems with separate virtual routers can communicate with one another within a Palo Alto Networks firewall. In addition to confirming Security policies, which three configurations will accomplish this goal? (Choose three)

正解：A,C,D 解答を投票する
An administrator configures a site-to-site IPsec VPN tunnel between a PA-850 and an external customer on their policy-based VPN devices.
What should an administrator configure to route interesting traffic through the VPN tunnel?

An administrator needs to validate that policies that will be deployed will match the appropriate rules in the device-group hierarchy. Which tool can the administrator use to review the policy creation logic and verify that unwanted traffic is not allowed?

解説: (GoShiken メンバーにのみ表示されます)
A firewall engineer creates a new App-ID report under Monitor > Reports > Application Reports > New Applications to monitor new applications on the network and better assess any Security policy updates the engineer might want to make.
How does the firewall identify the New App-ID characteristic?

解説: (GoShiken メンバーにのみ表示されます)
A company wants to implement threat prevention to take action without redesigning the network routing.
What are two best practice deployment modes for the firewall? (Choose two.)

Users have reported an issue when they are trying to access a server on your network. The requests aren't taking the expected route. You discover that there are two different static routes on the firewall for the server.
What is used to determine which route has priority?

解説: (GoShiken メンバーにのみ表示されます)
A network security administrator has an environment with multiple forms of authentication. There is a network access control system in place that authenticates and restricts access for wireless users, multiple Windows domain controllers, and an MDM solution for company-provided smartphones. All of these devices have their authentication events logged.
Given the information, what is the best choice for deploying User-ID to ensure maximum coverage?

解説: (GoShiken メンバーにのみ表示されます)
Which three items must be configured to implement application override? (Choose three )

正解：A,C,E 解答を投票する
解説: (GoShiken メンバーにのみ表示されます)
What type of NAT is required to configure transparent proxy?

Which sessions does Packet Buffer Protection apply to when used on ingress zones to protect against single- session DoS attacks?

解説: (GoShiken メンバーにのみ表示されます)
Which Panorama feature protects logs against data loss if a Panorama server fails?

解説: (GoShiken メンバーにのみ表示されます)
Which DoS Protection Profile detects and prevents session exhaustion attacks against specific destinations?

解説: (GoShiken メンバーにのみ表示されます)
ページ: 1 / 18
トータル 330 問