最新的Network Security Administrator認證 PCSFE考試題庫

問題1

Which component can provide application-based segmentation and prevent lateral threat movement?

A. URL Filtering

B. NAT

C. App-ID

D. DNS Security

正確答案: C

說明：（僅 VCESoft 成員可見）

問題2

How does a CN-Series firewall prevent exfiltration?

A. It employs custom-built signatures based on hash

B. It inspects outbound traffic content and blocks suspicious activity.

C. It provides a license deactivation API key.

D. It distributes incoming virtual private cloud (VPC) traffic across the pool of VM-Series firewalls.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題3

What is required to integrate a Palo Alto Networks VM-Series firewall with Azure Orchestration?

A. Aperture orchestration engine

B. Client-ID

C. API Key

D. Dynamic Address Groups

正確答案: C

說明：（僅 VCESoft 成員可見）

問題4

Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?

A. IPA-Series

B. CN-Series

C. HA-Series

D. VM-Series

正確答案: D

說明：（僅 VCESoft 成員可見）

問題5

A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?

A. Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).

B. Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.

C. Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.

D. Edit the IP address of all of the affected VMs. www*

正確答案: C

說明：（僅 VCESoft 成員可見）

問題6

What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments with network security delivered as a managed cloud service?

A. Cloud next-generation firewall

B. CN-Series

C. Ion-Series Ion-Series

D. VM-Series

正確答案: A

說明：（僅 VCESoft 成員可見）

問題7

What can be implemented in a CN-Series to protect communications between Dockers?

A. Vulnerability management

B. Firewalling

C. Data loss prevention (DLP)

D. Runtime security

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Palo Alto Networks Certified Software Firewall Engineer - PCSFE免費考試真題

最新更新

站內鏈接

聯系我們