PCNSC無料問題集「Palo Alto Networks Certified Network Security Consultant」

質問 1

Match the App-ID adoption task with its order in the process.

正解：

Explanation:
To match the App-ID adoption task with its order in the process, follow these steps:
* Perform a like-for-like (Layer 3/4) migration from the legacy firewall to the Palo Alto Networks NGFW.
* This is the initial step to ensure that the Palo Alto Networks NGFW is in place and functioning with the existing security policies.
* Capture, retain, and verify that all traffic has been logged for a period of time.
* This step involves enabling logging and monitoring traffic to understand the application usage and to ensure that all traffic is being logged.
* Clone the legacy rules and add application information to the intended application-based rules.
* This step involves creating copies of the existing rules and enhancing them with application-specific information using App-ID.
* Verify that no traffic is hitting the legacy rules.
* After creating application-based rules, ensure that traffic is now hitting these new rules instead of the legacy rules. This indicates that the transition to App-ID based policies is successful.
* Remove the legacy rules.
* Once it is confirmed that no traffic is hitting the legacy rules and the new App-ID based rules are effectively managing the traffic, the legacy rules can be safely removed.
Order in Process:
* Perform a like-for-like (Layer 3/4) migration from the legacy firewall to the Palo Alto Networks NGFW.
* Capture, retain, and verify that all traffic has been logged for a period of time.
* Clone the legacy rules and add application information to the intended application-based rules.
* Verify that no traffic is hitting the legacy rules.
* Remove the legacy rules.
References:
* Palo Alto Networks - App-ID Best Practices: https://docs.paloaltonetworks.com/best-practices
* Palo Alto Networks - Migration from Legacy Firewalls: https://docs.paloaltonetworks.com/migration

質問 2

A customer's Palo Alto Networks NGFW currently has only one security policy allowing all traffic They have identified that this is a substantial security risk and have heard that the Expedition tool can help them extract security policies from an "allow any" rule What should the consultant say about Expedition?

（A）By using the Machine Learning feature Expedition can parse the traffic log files related to the polcy and extract security rules for matching traffic

（B）Expedition cannot parse log files and therefore cannot be used for this purpose

（C）Live firewall traffic can be viewed on Expedition when connected to a firewall, and Expedition can automatically create and push policies to the firewall

（D）The log files can be viewed on Expedition, and right-clicking a log entry gives the option to create security policy from the log entry.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Where and how is Expedition installed^

（A）On an Ubuntu server, by running an installation script thatwill automatically download all dependencies

（B）On an Ubuntu server, by manually installing the application and all dependencies

（C）On a Windows Server, by running an installation script that will automatically download all dependencies

（D）On a Windows Server by manually installing the application and all dependencies

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which log type would you consult to diagnose why a specific URL is being blocked?

（A）Data Filtering log

（B）URL Filtering log

（C）Threat log

（D）Traffic log

正解：B 解答を投票する

質問 5

Which Panorama operational mode is necessary to manage a large number of firewalls and also act as a log collector?

（A）Dedicated Log Collector

（B）Log Collector Only

（C）Management Only

（D）Management and Log Collector

正解：D 解答を投票する

質問 6

What is the purpose of the WildFire Analysis Profile in a security policy?

（A）To enable WildFire to analyze all network traffic

（B）To specify which files are sent to WildFire for analysis

（C）To configure the WildFire subscription settings

（D）To define the action to be taken on files analyzed by WildFire

正解：B 解答を投票する

PCNSC 無料問題集「Palo Alto Networks Certified Network Security Consultant」

弊社を連絡する

関連リンク

トップ試験