Why would an enterprise architect use a Zero Trust Network Access (ZTNA) connector instead of a service connection for private application access?
A. It automatically discovers private applications and suggests Security policy rules for them.
B. It functions as the attachment point for IPSec-based connections to remote site or branch networks.
C. It controls traffic from the mobile endpoint to any of the organization's internal resources.
D. It supports traffic sourced from on-premises or public cloud-based resources to mobile users and remote networks.
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
A network engineer needs to configure a Prisma SD-WAN environment to optimize and secure traffic flow between branch offices and the data center.
Which action should the engineer prioritize to achieve the most operationally efficient communication?
A. Ensure all branch office traffic is routed through a central hub for inspection.
B. Create NAT policies to translate internal branch IP addresses to public IP addresses.
C. Configure dynamic path selection based on network performance metrics.
D. Define security zones for branch offices and the data center.
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
Which zone is available for use in Prisma Access?
A. Interzone
B. Intrazone
C. DMZ
D. Clientless VPN
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
Which NGFW function can be used to enhance visibility, protect, block, and log the use of Post-quantum Cryptography (PQC)?
A. DNS Security profile
B. Decryption policy
C. Decryption profile
D. Security policy
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
A company has an ongoing initiative to monitor and control IT-sanctioned SaaS applications. To be successful, it will require configuration of decryption policies, along with data filtering and URL Filtering Profiles used in Security policies.
Based on the need to decrypt SaaS applications, which two steps are appropriate to ensure success? (Choose two.)
A. Configure SSL Inbound Inspection.
B. Validate which certificates will be used to establish trust.
C. Configure SSL Forward Proxy.
D. Create new self-signed certificates to use for decryption.
正解:B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 6:
A firewall administrator wants to segment the network traffic and prevent noncritical assets from being able to access critical assets on the network.
Which action should the administrator take to ensure the critical assets are in a separate zone from the noncritical assets?
A. Create an allow Security policy with "any" set for both the source and destination zones.
B. Create a deny Security policy with "any" set for both the source and destination zones.
C. Assign a single interface to multiple security zones.
D. Logically separate physical and virtual interfaces to control the traffic that passes across the interface.
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 7:
Which Security profile should be queried when investigating logs for upload attempts that were recently blocked due to sensitive information leaks?
A. URL Filtering
B. Antivirus
C. Data Filtering
D. Anti-spyware
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
860 お客様のコメント





Hitoha -
初めてNetSec-Generalist試験に参加し、幸いにして、無事に合格しました。NetSec-Generalist参考資料のおかげです。