السؤال #1

Using Prisma Access, which solution provides the most security coverage of network protocols for the mobile workforce?

A. Explicit proxy

B. Client-based VPN

C. Enterprise browser

D. Clientless VPN

عرض الإجابة

اجابة صحيحة: B

السؤال #2

During a security incident investigation, which Security profile will have logs of attempted confidential data exfiltration?

A. File Blocking Profile

B. Enterprise DLP Profile

C. Vulnerability Protection Profile

D. WildFire Analysis Profile

عرض الإجابة

اجابة صحيحة: B

السؤال #3

An NGFW administrator is updating PAN-OS on company data center firewalls managed by Panoram

A. Prior to installing the update, what must the administrator verify to ensure the devices will continue to be supported by Panorama?

B. Device telemetry is enabled

C. Panorama is configured as the primary device in the log collecting group for the data center firewalls

D. All devices are in the same template stack

E. Panorama is running the same or newer PAN-OS release as the one being installed

عرض الإجابة

اجابة صحيحة: D

السؤال #4

Which feature of SaaS Security will allow a firewall administrator to identify unknown SaaS applications in an environment?

A. AApp-ID Cloud Engine

B. BApp-ID

C. CSaaS Data Security

D. DCloud Identity Engine

عرض الإجابة

اجابة صحيحة: A

السؤال #5

Which two tools can be used to configure Cloud NGFWs for AWS? (Choose two.)

A. Cortex XSIAM

B. Prisma Cloud management console

C. Panorama

D. Cloud service provider's management console

عرض الإجابة

اجابة صحيحة: CD

السؤال #6

How do template stacks help manage firewall configurations in Panorama?

A. By grouping templates across multiple firewalls

B. By creating template variables for permanent configurations in firewalls

C. By creating a diagram of the network for a view of all firewalls

D. By handling firmware updates across multiple firewalls

عرض الإجابة

اجابة صحيحة: A

السؤال #7

Using Prisma Access, which solution provides the most security coverage of network protocols for the mobile workforce?

A. Explicit proxy

B. Client-based VPN

C. Enterprise browser

D. Clientless VPN

عرض الإجابة

اجابة صحيحة: B

السؤال #8

A cloud security architect is designing a certificate management strategy for Strata Cloud Manager(SCM) across hybrid environments. Which practice ensures optimal security with low managementoverhead?

A. eploy centralized certificate automation with standardized protocols and continuous monitoring

B. mplement separate certificate authorities with independent validation rules for each cloud environment

C. onfigure manual certificate deployment with quarterly reviews and environment-specific security protocols

D. se cloud provider default certificates with scheduled synchronization and localized renewal processes

عرض الإجابة

اجابة صحيحة: A

السؤال #9

When a firewall acts as an application-level gateway (ALG), what does it require in order to establish a connection?

A. ADynamic IP and Port (DIPP)

B. BPayload

C. CSession Initiation Protocol (SIP)

D. DPinholes

عرض الإجابة

اجابة صحيحة: B

السؤال #10

After a firewall is associated with Strata Cloud Manager (SCM), which two additional actions arerequired to enable management of the firewall from SCM? (Choose two.)

A. eploy a service connection for each branch site and connect with SCM

B. onfigure NTP and DNS servers for the firewall

C. onfigure a Security policy allowing “stratacloudmanager

D. nstall a device certificate

عرض الإجابة

اجابة صحيحة: BD

السؤال #11

Which two prerequisites must be evaluated when decrypting internet-bound traffic? (Choose two.)

A. Incomplete certificate chains

B. RADIUS profile

C. Certificate pinning

D. SAML certificate

عرض الإجابة

اجابة صحيحة: AC

السؤال #12

Which procedure is most effective for maintaining continuity and security during a Prisma Access data plane software upgrade?

A. Back up configurations, schedule upgrades during off-peak hours, and use a phased approach rather than attempting a network-wide rollout

B. Use Strata Cloud Manager (SCM) to perform dynamic upgrades automatically and simultaneously across all locations at once to ensure network-wide uniformity

C. Disable all security features during the upgrade to prevent conflicts and re-enable them after completion to ensure a smooth rollout process

D. Perform the upgrade during peak business hours, quickly address any user-reported issues, and ensure immediate troubleshooting post-rollout

عرض الإجابة

اجابة صحيحة: A

السؤال #13

How do zones enhance security in a Palo Alto NGFW deployment?

A. y enforcing logging for all interfaces

B. y segmenting traffic and enabling granular policy enforcement

C. y limiting the need for SSL decryption

D. y creating dynamic routing paths

عرض الإجابة

اجابة صحيحة: B

السؤال #14

A cloud security architect is designing a certificate management strategy for Strata Cloud Manager (SCM) across hybrid environments. Which practice ensures optimal security with low management overhead?

A. ADeploy centralized certificate automation with standardized protocols and continuous monitoring

B. BImplement separate certificate authorities with independent validation rules for each cloud environment

C. CConfigure manual certificate deployment with quarterly reviews and environment-specific security protocols

D. DUse cloud provider default certificates with scheduled synchronization and localized renewal processes

عرض الإجابة

اجابة صحيحة: A

السؤال #15

Which two tools can be used to configure Cloud NGFWs for AWS? (Choose two.)

A. Cortex XSIAM

B. Prisma Cloud management console

C. Panorama

D. Cloud service provider's management console

عرض الإجابة

اجابة صحيحة: CD

السؤال #16

Which feature of SaaS Security will allow a firewall administrator to identify unknown SaaS applications in an environment?

A. pp-ID

B. loud Identity Engine

C. pp-ID Cloud Engine

D. aaS Data Security

عرض الإجابة

اجابة صحيحة: C

السؤال #17

In which two applications can Prisma Access threat logs for mobile user traffic be reviewed? (Choose two.)

A. Prisma Cloud dashboard

B. Strata Cloud Manager (SCM)

C. Strata Logging Service

D. Service connection firewall

عرض الإجابة

اجابة صحيحة: BC

السؤال #18

Which action optimizes user experience across a segmented network architecture and implements the most effective method to maintain secure connectivity between branch and campus locations?

A. Establish site-to-site tunnels on each branch and campus firewall and have individual VLANs for each department

B. Configure all branch and campus firewalls to use a single shared broadcast domain

C. Implement SD-WAN to route all traffic based on network performance metrics and use zone protection profiles

D. Configure a single campus firewall to handle the routing of all branch traffic

عرض الإجابة

اجابة صحيحة: C

السؤال #19

A network security engineer needs to implement segmentation but is under strict compliance requirements to place security enforcement as close as possible to the private applications hosted in Azure.Which deployment style is valid and meets the requirements in this scenario?

A. On a PA-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network

B. On a VM-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network

C. On a VM-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network

D. On a PA-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network

عرض الإجابة

اجابة صحيحة: B

السؤال #20

A network security engineer needs to implement segmentation but is under strict compliance requirements to place security enforcement as close as possible to the private applications hosted in Azure.Which deployment style is valid and meets the requirements in this scenario?

A. n a PA-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network

B. n a VM-Series NGFW, configure several Layer 3 zones with Layer 3 interfaces assigned to logically segment the network

C. n a VM-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network

D. n a PA-Series NGFW, configure several Layer 2 zones with Layer 2 interfaces assigned to logically segment the network

عرض الإجابة

اجابة صحيحة: B

السؤال #21

Which two SSH Proxy decryption profile settings should be configured to enhance the company’ssecurity posture? (Choose two.)

A. lock sessions when certificate validation fails

B. llow sessions with legacy SSH protocol versions

C. lock connections that use non-compliant SSH versions

D. llow sessions when decryption resources are unavailable

عرض الإجابة

اجابة صحيحة: AC

السؤال #22

Which security profile provides real-time protection against threat actors who exploit the misconfigurations of DNS infrastructure and redirect traffic to malicious domains?

A. Antivirus

B. URL Filtering

C. Vulnerability Protection

D. Anti-spyware

عرض الإجابة

اجابة صحيحة: D

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان