最新的Palo Alto Networks Systems Engineer認證 PSE-Strata考試題庫

問題1

What are two benefits of the sinkhole Internet Protocol (IP) address that DNS Security sends to the client in place of malicious IP addresses? (Choose two.)

A. The client communicates with it instead of the malicious IP address

B. It represents the remediation server that the client should visit for patching

C. In situations where the internal DNS server is between the client and the firewall, it gives the firewall the ability to identify the clients who originated the query to the malicious domain

D. It will take over as the new DNS resolver for that client and prevent further DNS requests from occurring in the meantime

正確答案: A,C

說明：（僅 VCESoft 成員可見）

問題2

What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)

A. Increased security due to scalable cloud delivered security Services (CDSS)

B. Cost savings due to reduction in IT management effort and device

C. improved revenue due to more efficient network traffic throughput

D. operational efficiencies due to reduction in manual incident review and decrease in mean time to resolution (MTTR)

正確答案: A,B,D

說明：（僅 VCESoft 成員可見）

問題3

What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

A. Self-Signed certificates

B. Enterprise CA-signed certificates

C. Intermediate certificates

D. Private key certificates

正確答案: A,B

說明：（僅 VCESoft 成員可見）

問題4

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy. Which two features must be enabled to meet the customer's requirements? (Choose two.)

A. Virtual systems

B. HA active/active

C. Policy-based forwarding

D. HA active/passive

正確答案: B,C

說明：（僅 VCESoft 成員可見）

問題5

What action would address the sub-optimal traffic path shown in the figure?
Key:
RN - Remote Network
SC - Service Connection
MU GW - Mobile User Gateway

A. Onboard a Remote Network location in the EMEA region

B. Remove the Service Connection in the EMEA region

C. Onboard a Service Connection in the APAC region

D. Onboard a Service Connection in the Americas region

正確答案: D

說明：（僅 VCESoft 成員可見）

問題6

A customer is seeing an increase in the number of malicious files coming in from undetectable sources in their network. These files include doc and .pdf file types.
The customer uses a firewall with User-ID enabled
Which feature must also be enabled to prevent these attacks?

A. Custom App-ID rules

B. Content Filtering

C. App-ID

D. WildFire

正確答案: D

說明：（僅 VCESoft 成員可見）

最新的Palo Alto Networks System Engineer Professional - Strata - PSE-Strata免費考試真題

最新更新

站內鏈接

聯系我們