PSE-Strata-Pro-24試験無料問題集（62題）「Palo Alto Networks Systems Engineer Professional

出題：1

Which statement appropriately describes performance tuning Intrusion Prevention System (IPS) functions on a Palo Alto Networks NGFW running Advanced Threat Prevention?

A. Create a new threat profile to use only signatures needed for the environment.

B. Work with TAC to run a debug and receive exact measurements of performance utilization for the IPS.

C. To increase performance, disable any threat signatures that do not apply to the environment.

D. Leave all signatures turned on because they do not impact performance.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A systems engineer (SE) has joined a team to work with a managed security services provider (MSSP) that is evaluating PAN-OS for edge connections to their customer base. The MSSP is concerned about how to efficiently handle routing with all of its customers, especially how to handle BGP peering, because it has created a standard set of rules and settings that it wants to apply to each customer, as well as to maintain and update them. The solution requires logically separated BGP peering setups for each customer. What should the SE do to increase the probability of Palo Alto Networks being awarded the deal?

A. Collaborate with the MSSP to create an API call with a standard set of routing filters, maps, and related actions, then the MSSP can call the API whenever they bring on a new customer.

B. Establish with the MSSP the use of vsys as the better way to segregate their environment so that customer data does not intermingle.

C. Work with the MSSP to plan for the enabling of logical routers in the PAN-OS Advanced Routing Engine to allow sharing of routing profiles across the logical routers.

D. Confirm to the MSSP that the existing virtual routers will allow them to have logically separated BGP peering setups, but that there is no method to handle the standard criteria across all of the routers.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Which two methods are valid ways to populate user-to-IP mappings? (Choose two.)

A. Captive portal

B. SCP log ingestion

C. User-ID

D. XML API

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

When a customer needs to understand how Palo Alto Networks NGFWs lower the risk of exploitation by newly announced vulnerabilities known to be actively attacked, which solution and functionality delivers the most value?

A. Advanced URL Filtering uses machine learning (ML) to learn which malicious URLs are being utilized by the attackers, then block the resulting traffic.

B. WildFire loads custom OS images to ensure that the sandboxing catches any activity that would affect the customer's environment.

C. Advanced Threat Prevention's command injection and SQL injection functions use inline deep learning against zero-day threats.

D. Single Pass Architecture and parallel processing ensure traffic is efficiently scanned against any enabled Cloud-Delivered Security Services (CDSS) subscription.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A company with Palo Alto Networks NGFWs protecting its physical data center servers is experiencing a performance issue on its Active Directory (AD) servers due to high numbers of requests and updates the NGFWs are placing on the servers. How can the NGFWs be enabled to efficiently identify users without overloading the AD servers?

A. Configure Cloud Identity Engine to learn the users' IP address-user mappings from the AD authentication logs.

B. Configure data redistribution to redistribute IP address-user mappings from a hub NGFW to the other spoke NGFWs.

C. Configure an NGFW as a GlobalProtect gateway, then have all users run GlobalProtect Windows SSO to gather user information.

D. Configure an NGFW as a GlobalProtect gateway, then have all users run GlobalProtect agents to gather user information.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which two actions should a systems engineer take when a customer is concerned about how to remain aligned to Zero Trust principles as they adopt additional security features over time? (Choose two)

A. Apply decryption where possible to inspect and log all new and existing traffic flows.

B. Use the Policy Optimizer tool to understand security rules allowing users to bypass decryption.

C. Turn on all licensed Cloud-Delivered Security Services (CDSS) subscriptions in blocking mode for all policies.

D. Use the Best Practice Assessment (BPA) tool to measure progress toward Zero Trust principles.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

PSE-Strata-Pro-24試験無料問題集「Palo Alto Networks Systems Engineer Professional - Hardware Firewall 認定」