PSE-Strata 高级 PDF 和测试引擎文件，含 224 个问题和答案 [Q16-Q32]

新问题 16
Which three script types can be analyzed in WildFire? (Choose three)

新问题 17
An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

新问题 18
What are three possible verdicts that WildFire can provide for an analyzed sample? (Choose three)

新问题 19
The botnet report displays a confidence score of 1 to 5 indicating the likelihood of a botnet infection.
Which three sources are used by the firewall as the basis of this score? (Choose three.)

新问题 20
Which two platform components can identify and protect against malicious email links? (Choose two.)

新问题 21
How does SSL Forward Proxy decryption work?

新问题 22
哪两种产品可以将日志发送到 Cortex 数据湖？(请选择两个）。

新问题 23
A price sensitive customer wants to prevent attacks on a windows 2008 Virtual Server. The server will max out at 100Mbps but needs to have 45,000 sessions to connect to multiple hosts within a data center.
Which VM instance should be used to secure the network by this customer?

新问题 24
What are two benefits of the sinkhole Internet Protocol (IP) address that DNS Security sends to the client in place of malicious IP addresses? (Choose two.)

新问题 25
Given the following network diagram, an administrator is considering the use of Windows Log Forwarding and Global Catalog servers for User-ID implementation. What are two potential bandwidth and processing bottlenecks to consider? (Choose two.)

新问题 26
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

新问题 27
Which design objective could be satisfied by vsys functionality?

新问题 28
Which two actions should be taken prior to installing a decryption policy on an NGFW? (Choose two.)

新问题 29
客户担心恶意活动会直接发生在他们的端点上，而他们的防火墙看不到。
在安全事件期间，Traps 代理除了确保防止该活动外，还会执行哪三个操作？(请选择三个）。

新问题 30
Which two actions can be taken to enforce protection from brute force attacks in the security policy? (Choose two.)

新问题 31
A customer is targeted by a true zero-day, targeted attack. However, the customer is protected by the Palo Alto Networks security platform.
The attack leverages a previously unknown vulnerability in IE but utilizes existing hacking techniques on the endpoint. It is transported over standard HTTP traffic and conforms to the HTML standards. It then attempts to download from a website, compromised specifically for this attack, a custom piece of malware to run on the endpoints.
Which element of the platform will stop this attack?

新问题 32
哪三种功能用于防止滥用被盗凭据？(请选择三个）。