Palo Alto Networks PSE-SoftwareFirewall 問題集

質問 1：
Which two features of CN-Series firewalls protect east-west traffic between pods in different trust zones?
(Choose two.)
A. Layer 7 visibility
B. Communication with Panorama
C. External load balancer (ELB)
D. Intrusion prevention system (IPS)
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security.
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?
A. Send the VLAN out of the virtual environment into a hardware Palo Alto Networks firewall in Layer 3 mode. Use the same IP address as the old default gateway, then delete it.
B. Edit the IP address of all of the affected VMs.
C. Create a new virtual switch and use the VM-Series firewall to separate virtual switches using virtual wire mode. Then move the guests that require more security into the new virtual switch.
D. Create a Layer 3 interface in the same subnet as the VMs and then configure proxy Address Resolution Protocol (ARP).
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which two design options address split brain when configuring high availability (HA)? (Choose two.)
A. Sending heartbeats across the HA2 interfaces
B. Adding a backup HA1 interface
C. Bundling multiple interfaces in an aggregated interface group and assigning HA2
D. Using the heartbeat backup
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which two statements apply to the VM-Series plugin? (Choose two.)
A. It enables management of cloud-specific interactions between VM-Series firewalls and supported public cloud platforms.
B. It can be upgraded independently of PAN-OS.
C. It can manage capabilities common to both VM-Series firewalls and hardware firewalls.
D. It can manage Panorama plugins.
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
How does a CN-Series firewall prevent exfiltration?
A. It provides a license deactivation API key.
B. It distributes incoming virtual private cloud (VPC) traffic across the pool of VM-Series firewalls.
C. It inspects outbound traffic content and blocks suspicious activity.
D. It employs custom-built signatures based on hash.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which three NSX features can be pushed from Panorama in PAN-OS? (Choose three.)
A. User IP mappings
B. Multiple authorization codes
C. Security groups
D. Steering rules
E. Security group assignment of virtual machines (VMs)
正解：A,D,E
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Which two methods of Zero Trust implementation can benefit an organization? (Choose two.)
A. Security automation is seamlessly integrated.
B. Compliance is validated.
C. Access controls are enforced.
D. Boundaries are established.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)