Palo Alto Networks SecOps-Generalist 시험 개요:

Palo Alto Networks SecOps-Generalist 시험 요강 주제:

최신 Security Operations Generalist SecOps-Generalist 무료샘플문제

문제 #1
Which Palo Alto Networks Cloud-Delivered Security Services (CDSS) require a firewall to send metadata or copies of suspicious content to a cloud-based analysis or intelligence platform to perform their primary security function? (Select all that apply)

A. Threat Prevention (specifically threat intelligence feeds)
B. WildFire analysis
C. URL Filtering (specifically URL category lookups)
D. App-ID
E. User-ID

문제 #2
A global company is implementing granular control over SaaS application usage using Palo Alto Networks Strata NGFWs at branch offices and Prisma Access for remote users. They have configured decryption policies to inspect SSL/TLS traffic for sanctioned SaaS applications like Office 365 and Salesforce. However, users accessing unsanctioned shadow IT applications via encrypted channels are still successfully bypassing security controls. Additionally, some legitimate applications are experiencing functionality issues after decryption is enabled. What are potential reasons for these issues and necessary steps to address them?

A. Application functionality issues may arise if the application uses client-side certificates, pinned certificates, or relies on specific SSL/TLS negotiation steps that are disrupted by the decryption proxy.
B. Decryption is not properly configured for all relevant traffic zones, causing some encrypted traffic to pass through uninspected.
C. The firewall/Prisma Access might be encountering SSL/TLS protocol versions or cipher suites that are not supported for decryption, leading to decryption failures and fallback to non-decrypted paths (potentially allowing unsanctioned apps).
D. The security policy rules using App-ID are ordered incorrectly, allowing 'allow' rules for 'any' application to match encrypted traffic before the decryption policy is evaluated.
E. The applications identified by App-ID are not all being processed by the decryption policy before reaching security profiles.

문제 #3
A security administrator logging into the AIOps for NGFW dashboard needs a quick overview of the overall health, security posture, and potential operational issues across their fleet of managed firewalls. Which sections or widgets on the AIOps dashboard are designed to provide this high-level summary information?

A. Security Policy rule usage statistics.
B. Configuration logs viewer.
C. Best Practices Assessment score and findings summary.
D. Detailed threat log viewer.
E. Operational Status dashboard, showing critical alerts and key performance indicators (KPIs).

문제 #4
A company is deploying a new internal application that uses a standard web server (HTTPS on port 443) but needs specific security policy enforcement (different from general web browsing) and precise visibility into its usage. App-ID currently identifies this traffic as 'web-browsing'. How can an administrator configure the Palo Alto Networks NGFW (Strata/Prisma SASE) to identify this internal application separately and enable granular policy control?

A. Use a URL Filtering profile to categorize the internal application's URL and apply policy based on that category.
B. Define a custom App-ID signature based on unique characteristics of the application's traffic (e.g., specific HTTP headers, URL patterns), and use this custom App-ID in Security Policy rules.
C. Create a custom Service object for port 443 and use it in the Security policy rule instead of the default 'service-https'.
D. Modify the default 'web-browsing' App-ID signature to exclude traffic to the internal application's IP address.
E. Enable SSL Inbound Inspection for the internal application server and rely on Content-ID to differentiate the traffic.

문제 #5
A large enterprise is migrating some internal applications to a cloud-based Software-as-a-Service (SaaS) model and implementing a SASE architecture leveraging Palo Alto Networks Prisma Access. They are encountering issues with the correct identification and enforcement of policies for a specific custom internal web application that now runs on a standard HTTPS port (443) alongside other legitimate SaaS traffic. The security team needs to ensure this custom application is identified separately from general 'web-browsing' and enforce specific QOS and security profiles on it.

A. Rely on Content-ID to identify the specific application content and apply policies based on content signatures instead of App-ID.
B. Create a custom application signature using App-ID based on unique characteristics of the application's payload or behavior, then create a security policy rule matching this custom App-ID.
C. Configure a URL Filtering profile to block access to the custom application's URL, then allow it in a separate rule with the desired profiles.
D. Modify the default 'web-browsing' application signature to exclude traffic destined for the specific IP address/FQDN of the custom application.
E. Deploy a separate, dedicated Strata NGFW appliance specifically for this custom application traffic before it reaches Prisma Access.

질문과 대답: