次の認定試験に速く合格する！

簡単に認定試験を準備し、学び、そして合格するためにすべてが必要だ。

会員センターカート (0)

PCNSE 無料問題集「Palo Alto Networks Certified Network Security Engineer」

ページ: 1 / 14
トータル 250 問

サインアップ、ログインされた後に、試験全体を無料で表示できるようになります。

質問 1

An administrator is receiving complaints about application performance degradation. After checking the ACC, the administrator observes that there is an excessive amount of VoIP traffic.
Which three elements should the administrator configure to address this issue? (Choose three.)

（A）QoS on the ingress interface for the traffic flows

（B）An Application Override policy for the SIP traffic

（C）QoS on the egress interface for the traffic flows

（D）A QoS policy for each application ID

（E）A QoS profile defining traffic classes

正解：C、D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which three multi-factor authentication methods can be used to authenticate access to the firewall? (Choose three.)

（A）One-time password

（B）Voice

（C）User certificate

（D）SMS

（E）Fingerprint

正解：A、C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

An auditor is evaluating the configuration of Panorama and notices a discrepancy between the Panorama template and the local firewall configuration.
When overriding the firewall configuration pushed from Panorama, what should you consider?

（A）Panorama will update the template with the overridden value.

（B）The firewall template will show that it is out of sync within Panorama.

（C）The modification will not be visible in Panorama.

（D）Only Panorama can revert the override.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which function does the HA4 interface provide when implementing a firewall cluster which contains firewalls configured as active-passive pairs?

（A）Perform synchronization of routes, IPSec security associations, and User-ID information.

（B）Perform session cache synchronization for all HA cluster members with the same cluster ID.

（C）Perform packet forwarding to the active-passive peer during session setup and asymmetric traffic flow.

（D）Perform synchronization of sessions, forwarding tables, and IPSec security associations between firewalls in an HA pair.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A firewall engineer creates a source NAT rule to allow the company's internal private network 10.0.0.0/23 to access the internet. However, for security reasons, one server in that subnet (10.0.0.10/32) should not be allowed to access the internet, and therefore should not be translated with the NAT rule.
Which set of steps should the engineer take to accomplish this objective?

（A）1- Create a NAT rule (NAT-Rule-1) and set the source address in the original packet to 10.0.0.0/23.
2. Check the box for negate option to negate this IP subnet from NAT translation.

（B）1. Create a source NAT rule (NAT-Rule-1) to translate 10.0.0/23 with source address translation set to dynamic IP and port.
2. Create another NAT rule (NAT-Rule-2) with source IP address in the original packet set to 10.0.0.10/32 and source translation set to none.
3. Place (NAT-Rule-1) above (NAT-Rule-2).

（C）1. Create a source NAT rule (NAT-Rule-1) to translate 10.0.0/23 with source address translation set to dynamic IP and port.
2. Create another NAT rule (NAT-Rule-2) with source IP address in the original packet set to 10.0.0.10/32 and source translation set to none.
3. Place (NAT-Rule-2) above (NAT-Rule-1).

（D）1. Create a NAT rule (NAT-Rule-1) and set the source address in the original packet to 10.0.0.10/32.
2. Check the box for negate option to negate this IP from the NAT translation.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

A network security administrator wants to enable Packet-Based Attack Protection in a Zone Protection profile. What are two valid ways to enable Packet-Based Attack Protection? (Choose two.)

（A）SYN Random Early Drop

（B）TCP Drop

（C）ICMP Drop

（D）TCP Port Scan Block

正解：B、C 解答を投票する

質問 7

A firewall administrator is investigating high packet buffer utilization in the company firewall. After looking at the threat logs and seeing many flood attacks coming from a single source that are dropped by the firewall, the administrator decides to enable packet buffer protection to protect against similar attacks.
The administrator enables packet buffer protection globally in the firewall but still sees a high packet buffer utilization rate.
What else should the administrator do to stop packet buffers from being overflowed?

（A）Add the default Vulnerability Protection profile to all security rules that allow traffic from outside.

（B）Enable packet buffer protection for the affected zones.

（C）Apply DOS profile to security rules allow traffic from outside.

（D）Add a Zone Protection profile to the affected zones.

正解：B 解答を投票する

質問 8

Forwarding of which two log types is configured in Device > Log Settings? (Choose two.)

（A）Threat

（B）Traffic

（C）Configuration

（D）HIP Match

正解：A、B 解答を投票する

質問 9

Exhibit.

Review the screenshots and consider the following information
1. FW-1is assigned to the FW-1_DG device group, and FW-2 is assigned to OFFICE_FW_DC
2. There are no objects configured in REGIONAL_DG and OFFICE_FW_DG device groups Which IP address will be pushed to the firewalls inside Address Object Server-1?

（A）Server-1 on FW-1 will have IP 3.3.3.3. Server-1 will not be pushed to FW-2.

（B）Server-1 on FW-1 will have IP 2.2.2.2. Server-1 will not be pushed to FW-2.

（C）Server-1 on FW-1 will have IP 4.4.4.4. Server-1 on FW-2 will have IP 1.1.1.1

（D）Server-1 on FW-1 will have IR 111.1. Server-1 will not be pushed to FW-2.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

A network administrator wants to deploy SSL Forward Proxy decryption. What two attributes should a forward trust certificate have? (Choose two.)

（A）A private key

（B）A subject alternative name

（C）A server certificate

（D）A certificate authority (CA) certificate

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.
What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)

（A）Explicit proxy supports interception of traffic using non-standard HTTPS ports.

（B）No client configuration is required for explicit proxy, which simplifies the deployment complexity.

（C）It supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request.

（D）Explicit proxy allows for easier troubleshooting, since the client browser is aware of the existence of the proxy.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Which two factors should be considered when sizing a decryption firewall deployment? (Choose two.)

（A）Number of blocked sessions

（B）TLS protocol version

（C）Encryption algorithm

（D）Number of security zones in decryption policies

正解：B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

Which three methods are supported for split tunneling in the GlobalProtect Gateway? (Choose three.)

（A）Destination Domain

（B）Client Application Process

（C）URL Category

（D）video streaming application

（E）Destination user/group

（F）Source Domain

正解：A、D、F 解答を投票する

質問 14

With the default TCP and UDP settings on the firewall, what will be the identified application in the following session?

（A）unknown-tcp

（B）Insufficient-data

（C）not-applicable

（D）Incomplete

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

In the New App Viewer under Policy Optimizer, what does the compare option for a specific rule allow an administrator to compare?

（A）The running configuration with the candidate configuration of the firewall

（B）Applications configured in the rule with their dependencies

（C）The security rule with any other security rule selected

（D）Applications configured in the rule with applications seen from traffic matching the same rule

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 16

In a template, which two objects can be configured? (Choose two.)

（A）Monitor profile

（B）Application group

（C）SD-WAN path quality profile

（D）IPsec tunnel

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

An administrator has configured OSPF with Advanced Routing enabled on a Palo Alto Networks firewall running PAN-OS 10.2. After OSPF was configured, the administrator noticed that OSPF routes were not being learned.
Which two actions could an administrator take to troubleshoot this issue? (Choose two.)

（A）Run the CLI command show advanced-routing ospf neighbor

（B）Look for configuration problems in Network > virtual router > OSPF

（C）In the WebUI, view Runtime Stats in the logical router

（D）In the WebUI, view the Runtime Stats in the virtual router

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

An administrator notices that an interface configuration has been overridden locally on a firewall. They require all configuration to be managed from Panorama and overrides are not allowed.
What is one way the administrator can meet this requirement?

（A）Reload the running configuration and perform a Firewall local commit.

（B）Perform a device-group commit push from Panorama using the "Include Device and Network Templates" option.

（C）Perform a template commit push from Panorama using the "Force Template Values" option.

（D）Perform a commit force from the CLI of the firewall.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

ページ: 1 / 14
トータル 250 問

PCNSE の機能をすべて解除する

キャプチャ不要
365日無料更新サービス
希望する合格率を設定できる
時間の割り当てられる（時間：分）
PCNSE に2つの練習用モード
サポートサービス対応

完全版を入手する

弊社を連絡する

我々は１２時間以内ですべてのお問い合わせを答えます。

オンラインサポート時間：( UTC+9 ) 9:00-24:00
月曜日から土曜日まで

サポート：現在連絡

トップ試験

MB-500 試験問題集
API-577 試験問題集
C-S4CFI-2408 試験問題集
HL7-FHIR 試験問題集
DP-203 試験問題集
C_THR83_2405 試験問題集

PCNSE 無料問題集「Palo Alto Networks Certified Network Security Engineer」

弊社を連絡する

関連リンク

トップ試験