Palo Alto Networks PSE-Strata-Pro-24 問題集

質問 1：
Which three use cases are specific to Policy Optimizer? (Choose three.)
A. Enabling migration from port-based rules to application-based rules
B. Automating the tagging of rules based on historical log data
C. Discovering 5-tuple attributes that can be simplified to 4-tuple attributes
D. Converting broad rules based on application filters into narrow rules based on application groups
E. Discovering applications on the network and transitions to application-based policy over time
正解：A,B,E
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An existing customer wants to expand their online business into physical stores for the first time. The customer requires NGFWs at the physical store to handle SD-WAN, security, and data protection needs, while also mandating a vendor-validated deployment method. Which two steps are valid actions for a systems engineer to take? (Choose two.)
A. Recommend the customer purchase Palo Alto Networks or partner-provided professional services to meet the stated requirements.
B. Create a bespoke deployment plan with the customer that reviews their cloud architecture, store footprint, and security requirements.
C. Use the reference architecture "On-Premises Network Security for the Branch Deployment Guide" to achieve a desired architecture.
D. Use Golden Images and Day 1 configuration to create a consistent baseline from which the customer can efficiently work.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
What are two methods that a NGFW uses to determine if submitted credentials are valid corporate credentials? (Choose two.)
A. WMI client probing
B. Group mapping
C. Domain credential filter
D. LDAP query
正解：C,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
While a quote is being finalized for a customer that is purchasing multiple PA-5400 series firewalls, the customer specifies the need for protection against zero-day malware attacks.
Which Cloud-Delivered Security Services (CDSS) subscription add-on license should be included in the quote?
A. Advanced Threat Prevention
B. AI Access Security
C. Advanced WildFire
D. App-ID
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
A systems engineer (SE) is working with a customer that is fully cloud-deployed for all applications. The customer is interested in Palo Alto Networks NGFWs but describes the following challenges:
"Our apps are in AWS and Azure, with whom we have contracts and minimum-revenue guarantees. We would use the built-in firewall on the cloud service providers (CSPs), but the need for centralized policy management to reduce human error is more important." Which recommendations should the SE make?
A. VM-Series firewall and CN-Series firewall in both CSPs; provide the customer a private-offer Panorama virtual appliance from their CSP's marketplace of choice to centrally manage the systems.
B. Cloud NGFWs in AWS and VM-Series firewall in Azure; the customer selects a PAYG licensing Panorama deployment in their CSP of choice.
C. Cloud NGFWs at both CSPs; provide the customer a license for a Panorama virtual appliance from their CSP's marketplace of choice to centrally manage the systems.
D. VM-Series firewalls in both CSPs; manually built Panorama in the CSP of choice on a host of either type: Palo Alto Networks provides a license.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
The efforts of a systems engineer (SE) with an industrial mining company account have yielded interest in Palo Alto Networks as part of its effort to incorporate innovative design into operations using robots and remote-controlled vehicles in dangerous situations. A discovery call confirms that the company will receive control signals to its machines over a private mobile network using radio towers that connect to cloud-based applications that run the control programs.
Which two sets of solutions should the SE recommend?
A. That 5G Security be enabled and architected to ensure the cloud computing is not compromised in the commands it is sending to the onsite machines.
B. That IoT Security be included for visibility into the machines and to ensure that other devices connected to the network are identified and given risk and behavior profiles.
C. That Cloud NGFW be included to protect the cloud-based applications from external access into the cloud service provider hosting them.
D. That an Advanced CDSS bundle (Advanced Threat Prevention, Advanced WildFire, and Advanced URL Filtering) be procured to ensure the design receives advanced protection.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)