PCSFE無料問題集「Palo Alto Networks Certified Software Firewall Engineer」

質問 1

How does a CN-Series firewall prevent exfiltration?

（A）It employs custom-built signatures based on hash

（B）It provides a license deactivation API key.

（C）It distributes incoming virtual private cloud (VPC) traffic across the pool of VM-Series firewalls.

（D）It inspects outbound traffic content and blocks suspicious activity.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)

（A）VXLAN support for network-layer abstraction

（B）NVGRE support for advanced VLAN integration

（C）Dynamic Address Groups to adapt Security policies dynamically

（D）Full set of APIs enabling programmatic control of policy and configuration

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which offering can gain visibility and prevent an attack by a malicious actor attempting to exploit a known web server vulnerability using encrypted communication?

（A）OCSP

（B）Advanced URL Filtering (AURLF)

（C）WildFire

（D）Secure Sockets Layer (SSL) Inbound Inspection

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?

（A）By creating an access policy

（B）Through a policy-based redirect

（C）By using contracts between endpoint groups that send traffic to the firewall using a shared policy

（D）Through a virtual machine (VM) monitor domain

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources from malware and lateral movement? (Choose two.)

（A）SD-WAN

（B）Threat Prevention

（C）Intelligent Traffic Offload

（D）WildFire

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?

（A）It must receive all forwarding lookups from the network controller

（B）It must be identified as a default gateway

（C）It must use a Layer 3 underlay network

（D）It must be deployed as a member of a device cluster

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

What do tags allow a VM-Series firewall to do in a virtual environment?

（A）Adapt Security policy rules dynamically.

（B）Integrate with security information and event management (SIEM) solutions.

（C）Provide adaptive reporting.

（D）Enable machine learning (ML).

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

PCSFE 無料問題集「Palo Alto Networks Certified Software Firewall Engineer」

弊社を連絡する

関連リンク

トップ試験