What would allow a network security administrator to authenticate and identify a user with a new BYOD-type device that is not joined to the corporate domain?
A. a Security policy with 'unknown' selected in the Source User field
B. an Authentication policy with 'unknown' selected in the Source User field
C. an Authentication policy with 'known-user' selected in the Source User field
D. a Security policy with 'known-user' selected in the Source User field
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
Which version of GlobalProtect supports split tunneling based on destination domain, client process, and HTTP/HTTPS video streaming application?
A. GlobalProtect version 4.0 with PAN-OS 8.0
B. GlobalProtect version 4.1 with PAN-OS 8.0
C. GlobalProtect version 4.1 with PAN-OS 8.1
D. GlobalProtect version 4.0 with PAN-OS 8.1
正解:C
質問 3:
A firewall engineer creates a NAT rule to translate IP address 1.1.1.10 to 192.168.1.10. The engineer also plans to enable DNS rewrite so that the firewall rewrites the IPv4 address in a DNS response based on the original destination IP address and translated destination IP address configured for the rule. The engineer wants the firewall to rewrite a DNS response of 1.1.1.10 to 192.168.1.10.
What should the engineer do to complete the configuration?
A. Enable DNS rewrite under the destination address translation in the Translated Packet section of the NAT rule with the direction Forward.
B. Create a U-Turn NAT to translate the destination IP address 1.1.1.10 to 192.168.1.10 with the destination port equal to UDP/53.
C. Create a U-Turn NAT to translate the destination IP address 192.168.1.10 to 1.1.1.10 with the destination port equal to UDP/53.
D. Enable DNS rewrite under the destination address translation in the Translated Packet section of the NAT rule with the direction Reverse.
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
An engineer troubleshooting a VPN issue needs to manually initiate a VPN tunnel from the CLI Which CLI command can the engineer use?
A. test vpn tunnel
B. test vpn ike-sa
C. test vpn gateway
D. test vpn flow
正解:B
質問 5:
Which administrative authentication method supports authorization by an external service?
A. Certificates
B. RADIUS
C. SSH keys
D. LDAP
正解:B
1369 お客様のコメント
クリック」





Shigeizumi -
PCNSE試験対策のテキストです。内容もしっかりしているし、かなりコスパが高いです。