561 お客様のコメント
クリック」
質問 1：
A root cause analysis investigation into a recent security incident reveals that several decryption rules have been disabled. The security team wants to generate email alerts when decryption rules are changed.
How should email log forwarding be configured to achieve this goal?
A. With the relevant configuration log filter inside Objects > Log Forwarding
B. With the relevant system log filter inside Device > Log Settings
C. With the relevant configuration log filter inside Device > Log Settings
D. With the relevant system log filter inside Objects > Log Forwarding
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks.
Which three settings can be configured in this template? (Choose three.)
A. SSL decryption exclusion
B. Dynamic updates
C. Login banner
D. Email scheduler
E. Log Forwarding profile
正解：A,B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
During the implementation of SSL Forward Proxy decryption, an administrator imports the company's Enterprise Root CA and Intermediate CA certificates onto the firewall. The company's Root and Intermediate CA certificates are also distributed to trusted devices using Group Policy and GlobalProtect. Additional device certificates and/or Subordinate certificates requiring an Enterprise CA chain of trust are signed by the company's Intermediate CA.
Which method should the administrator use when creating Forward Trust and Forward Untrust certificates on the firewall for use with decryption?
A. Generate a CA certificate for Forward Trust and a self-signed CA for Forward Untrust.
B. Generate two subordinate CA certificates, one for Forward Trust and one for Forward Untrust.
C. Generate a single subordinate CA certificate for both Forward Trust and Forward Untrust.
D. Generate a single self-signed CA certificate for Forward Trust and another for Forward Untrust
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.
What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)
A. Explicit proxy supports interception of traffic using non-standard HTTPS ports.
B. Explicit proxy allows for easier troubleshooting, since the client browser is aware of the existence of the proxy.
C. No client configuration is required for explicit proxy, which simplifies the deployment complexity.
D. It supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request.
正解：B,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
Given the following configuration, which route is used for destination 10 10 0 4?
A. Route 2
B. Route 1
C. Route 4
D. Route 3
正解：A
A root cause analysis investigation into a recent security incident reveals that several decryption rules have been disabled. The security team wants to generate email alerts when decryption rules are changed.
How should email log forwarding be configured to achieve this goal?
A. With the relevant configuration log filter inside Objects > Log Forwarding
B. With the relevant system log filter inside Device > Log Settings
C. With the relevant configuration log filter inside Device > Log Settings
D. With the relevant system log filter inside Objects > Log Forwarding
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks.
Which three settings can be configured in this template? (Choose three.)
A. SSL decryption exclusion
B. Dynamic updates
C. Login banner
D. Email scheduler
E. Log Forwarding profile
正解：A,B,C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
During the implementation of SSL Forward Proxy decryption, an administrator imports the company's Enterprise Root CA and Intermediate CA certificates onto the firewall. The company's Root and Intermediate CA certificates are also distributed to trusted devices using Group Policy and GlobalProtect. Additional device certificates and/or Subordinate certificates requiring an Enterprise CA chain of trust are signed by the company's Intermediate CA.
Which method should the administrator use when creating Forward Trust and Forward Untrust certificates on the firewall for use with decryption?
A. Generate a CA certificate for Forward Trust and a self-signed CA for Forward Untrust.
B. Generate two subordinate CA certificates, one for Forward Trust and one for Forward Untrust.
C. Generate a single subordinate CA certificate for both Forward Trust and Forward Untrust.
D. Generate a single self-signed CA certificate for Forward Trust and another for Forward Untrust
正解：A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.
What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)
A. Explicit proxy supports interception of traffic using non-standard HTTPS ports.
B. Explicit proxy allows for easier troubleshooting, since the client browser is aware of the existence of the proxy.
C. No client configuration is required for explicit proxy, which simplifies the deployment complexity.
D. It supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request.
正解：B,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
Given the following configuration, which route is used for destination 10 10 0 4?
A. Route 2
B. Route 1
C. Route 4
D. Route 3
正解：A
Kawai -
もちろん合格することが目標ではあるが、見やすく、PCNSE勉強しやすい本だと思いました。