検証済みのPSE-SASE問題集と解答で合格保証もしくは全額返金 [2023年01月]
PSE-SASEのPDF問題集で2023年01月16日最近更新された問題
質問 39
What are two benefits provided to an organization using a secure web gateway (SWG)? (Choose two.)
- A. An encrypted challenge-response mechanism obtains user credentials from the browser.
- B. Access to inappropriate websites or content is blocked based on acceptable use policies.
- C. VPNs remain connected, reducing user risk exposure.
- D. Security policies for making internet access safer are enforced.
正解: B,D
質問 40
The Cortex Data Lake sizing calculator for Prisma Access requires which three values as inputs? (Choose three.)
- A. number of mobile users purchased
- B. cloud-managed or Panorama-managed deployment
- C. retention period for the logs to be stored
- D. throughput of remote networks purchased
- E. number of log-forwarding destinations
正解: A,C,D
質問 41
Which elements of Autonomous Digital Experience Management (ADEM) help provide end-to-end visibility of everything in an organization's environment?
- A. integrated threat intelligence management, automated distribution to enforcement points at scale, full ticket mirroring
- B. data collected from endpoint devices, synthetic monitoring tests, and real-time traffic
- C. scanning of all traffic, ports, and protocols
- D. alerts, artifacts, and MITRE tactics
正解: A
質問 42
What can prevent users from unknowingly downloading potentially malicious file types from the internet?
- A. Assign a Vulnerability profile to Security policy rules that deny general web access.
- B. Apply a Zone Protection profile to the untrust zone.
- C. Assign an Antivirus profile to Security policy rules that deny general web access.
- D. Apply a File Blocking profile to Security policy rules that allow general web access.
正解: D
質問 43
Which secure access service edge (SASE) networking component inspects web-based protocols and traffic to securely connect users to applications?
- A. secure web gateway (SWG)
- B. SD-WAN
- C. proxy
- D. cloud access security broker (CASB)
正解: A
質問 44
What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices?
(Choose two.)
- A. network controller communication and monitoring
- B. control mode insertion without modification of existing network configuration
- C. local area network (LAN) Dynamic Host Configuration Protocol (DHCP) and DHCP relay functionality
- D. ensures automatic failover when ION devices experience software or network related failure
正解: D
質問 45
Users connect to a server in the data center for file sharing. The organization wants to decrypt the traffic to this server in order to scan the files being uploaded and downloaded to determine if malware or sensitive data is being moved by users.
Which proxy should be used to decrypt this traffic?
- A. SCP Proxy
- B. SSL Inbound Proxy
- C. SSL Forward Proxy
- D. SSH Forward Proxy
正解: B
質問 46
What are two ways service connections and remote network connections differ? (Choose two.)
- A. An on-premises resource cannot originate a connection to the internet over a service connection.
- B. Remote network connections enforce security policies, but service connections do not.
- C. Remote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.
- D. Service connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.
正解: C
質問 47
What is a disadvantage of proxy secure access service edge (SASE) when compared to an inline SASE solution?
- A. Proxies force policy actions to be treated as business decisions instead of compromises due to technical limitations.
- B. Proxy solutions require an unprecedented level of interconnectivity.
- C. Exclusive use of web proxies leads to significant blind spots in traffic and an inability to identify applications and threats on non-standard ports or across multiple protocols.
- D. Teams added additional tools to web proxies that promised to solve point problems, resulting in a fragmented and ineffective security architecture.
正解: C
質問 48
Which product allows advanced Layer 7 inspection, access control, threat detection and prevention?
- A. network sandbox
- B. Firewall as a Service (FWaaS)
- C. remote browser isolation
- D. Infrastructure as a Service (IaaS)
正解: B
質問 49
What is a key benefit of CloudBlades?
- A. automation of UI workflow without any code development and deployment of Prisma SD-WAN ION devices
- B. configuration of the authentication source once instead of for each authentication method used
- C. utilization of near real-time analysis to detect previously unseen, targeted malware and advanced persistent threats
- D. identification of port-based rules so they can be converted to application-based rules without compromising application availability
正解: A
質問 50
Which App Response Time metric is the measure of network latency?
- A. Network Transfer Time (NTTn)
- B. UDP Response Time (UDP-TRT)
- C. Round Trip Time (RTT)
- D. Server Response Time (SRT)
正解: C
質問 51
A customer currently uses a third-party proxy solution for client endpoints and would like to migrate to Prisma Access to secure mobile user internet-bound traffic.
Which recommendation should the Systems Engineer make to this customer?
- A. With the explicit proxy license, set up a service connection.
- B. With the mobile user license, set up explicit proxy.
- C. With the mobile user license, set up a corporate access node.
- D. With the explicit proxy license add-on, set up GlobalProtect.
正解: B
質問 52
What allows enforcement of policies based on business intent, enables dynamic path selection, and provides visibility into performance and availability for applications and networks?
- A. Cloud Access Security Broker (CASB)
- B. Instant-On Network (ION) devices
- C. Identity Access Management (IAM) methods
- D. Firewall as a Service (FWaaS)
正解: D
質問 53
How does SaaS Security Inline help prevent the data security risks of unsanctioned security-as-a-service (SaaS) application usage on a network?
- A. It offers risk scoring, analytics, reporting, and Security policy rule authoring.
- B. It provides built-in external dynamic lists (EDLs) that secure the network against malicious hosts.
- C. It prevents credential theft by controlling sites to which users can submit their corporate credentials.
- D. It provides mobility solutions and/or large-scale virtual private network (VPN) capabilities.
正解: B
質問 54
What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?
- A. Complexity of connecting to a gateway is increased, providing additional protection.
- B. Users, devices, and apps are identified no matter where they connect from.
- C. Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.
- D. Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.
正解: B
質問 55
Which CLI command allows visibility into SD-WAN events such as path selection and path quality measurements?
- A. >show sdwan session distribution policy-name
- B. >show sdwan connection all |
- C. >show sdwan event
- D. >show sdwan path-monitor stats vif
正解: C
質問 56
......
PSE-SASE試験問題有効なPSE-SASE問題集PDF：https://www.goshiken.com/Palo-Alto-Networks/PSE-SASE-mondaishu.html