Palo Alto Networks PSE-Strata-Pro-24 問題集

質問 1：
While a quote is being finalized for a customer that is purchasing multiple PA-5400 series firewalls, the customer specifies the need for protection against zero-day malware attacks.
Which Cloud-Delivered Security Services (CDSS) subscription add-on license should be included in the quote?
A. Advanced Threat Prevention
B. AI Access Security
C. Advanced WildFire
D. App-ID
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A current NGFW customer has asked a systems engineer (SE) for a way to prove to their internal management team that its NGFW follows Zero Trust principles. Which action should the SE take?
A. Help the customer build reports that align to their Zero Trust plan in the "Monitor > Manage Custom Reports" tab.
B. Use a third-party tool to pull the NGFW Zero Trust logs, and create a report that meets the customer's needs.
C. Use the "ACC" tab to help the customer build dashboards that highlight the historical tracking of the NGFW enforcing policies.
D. Use the "Monitor > PDF Reports" node to schedule a weekly email of the Zero Trust report to the internal management team.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A security engineer has been tasked with protecting a company's on-premises web servers but is not authorized to purchase a web application firewall (WAF).
Which Palo Alto Networks solution will protect the company from SQL injection zero-day, command injection zero-day, Cross-Site Scripting (XSS) attacks, and IIS exploits?
A. Advanced WildFire and PAN-OS 10.0 (and higher)
B. Threat Prevention, Advanced URL Filtering, and PAN-OS 10.2 (and higher)
C. Advanced Threat Prevention and PAN-OS 11.x
D. Threat Prevention and PAN-OS 11.x
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
According to a customer's CIO, who is upgrading PAN-OS versions, "Finding issues and then engaging with your support people requires expertise that our operations team can better utilize elsewhere on more valuable tasks for the business." The upgrade project was initiated in a rush because the company did not have the appropriate tools to indicate that their current NGFWs werereaching capacity.
Which two actions by the Palo Alto Networks team offer a long-term solution for the customer? (Choose two.)
A. Suggest the inclusion of training into the proposal so that the operations team is informed and confident in working on their firewalls.
B. Inform the CIO that the new enhanced security features they will gain from the PAN-OS upgrades will fix any future problems with upgrading and capacity.
C. Propose AIOps Premium within Strata Cloud Manager (SCM) to address the company's issues from within the existing technology.
D. Recommend that the operations team use the free machine learning-powered AIOps for NGFW tool.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
The PAN-OS User-ID integrated agent is included with PAN-OS software and comes in which two forms?
(Choose two.)
A. Integrated agent
B. Cloud Identity Engine (CIE)
C. Windows-based agent
D. GlobalProtect agent
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A prospective customer wants to validate an NGFW solution and seeks the advice of a systems engineer (SE) regarding a design to meet the following stated requirements:
"We need an NGFW that can handle 72 Gbps inside of our core network. Our core switches only have up to
40 Gbps links available to which new devices can connect. We cannot change the IP address structure of the environment, and we need protection for threat prevention, DNS, and perhaps sandboxing." Which hardware and architecture/design recommendations should the SE make?
A. PA-5430 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-2 or virtual wire mode that include 2 x 40Gbps interfaces on both sides of the path.
B. PA-5445 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-3 mode that include 40Gbps interfaces on both sides of the path.
C. PA-5445 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-2 or virtual wire mode that include 2 x 40Gbps interfaces on both sides of the path.
D. PA-5430 or larger to cover the bandwidth need and the link types; Architect aggregate interface groups in Layer-3 mode that include 40Gbps interfaces on both sides of the path.
正解：C
解説: (Topexam メンバーにのみ表示されます)