최신 PSE-DataCenter Professional PSE-DataCenter 무료샘플문제:
1. Which of these statements is true about Dynamic Address Groups?
A) They enable the flexibility to apply different rules to th e same server based on tags
B) The filtering criteria uses logical and , or , and not operators.
C) A dynamic address group uses tags as a filtering criterion to determine its members.
D) T hey allow you to create a policy that automatically adapts to changes - adds, moves,
2. A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?
A) Add a DoS Protection Profile with defined session count.
B) Add QoS Profiles to throttle incoming requests.
C) Define a custom App-ID to ensure that only legitimate application traffic reaches the server
D) Add a Vulnerability Protection Profile to block the attack.
3. What is required to support the second generation NPCs on a PA - 7050?
A) PAN - OS 7.0 or higher
B) The PA - 7050 cannot support the second generation NPCs; a PA - 7080 is required.
C) PAN - OS 6.1 or higher
D) The second generation NPCs must be installed in matched pairs.
질문과 대답:
질문 # 1 정답: A,C,D | 질문 # 2 정답: A | 질문 # 3 정답: A |