NetSec-Generalist 試験問題を無料オンラインアクセス

Which two cloud deployment high availability (HA) options would cause a firewall administrator to use Cloud NGFW? (Choose two.)

• A.Dedicated vNIC for HA
• B.Automated autoscaling
• C.Terraform to automate HA
• D.Deployed with load balancers

At a minimum, which action must be taken to ensure traffic coming from outside an organization to the DMZ can access the DMZ zone for a company using private IP address space?

• A.Configure NAT policies on the pre-NAT addresses and post-NAT zone.
• B.Create NAT policies on post-NAT addresses for all traffic destined for DMZ.
• C.Create policies only for pre-NAT addresses and any destination zone.
• D.Configure static NAT for all incoming traffic.

Which feature is available in both Panorama and Strata Cloud Manager (SCM)?

• A.Policy Optimizer
• B.Plug-ins
• C.Template stacks
• D.Configuration snippets

A company uses Prisma Access to provide secure connectivity for mobile users to access its corporate-sanctioned Google Workspace and wants to block access to all unsanctioned Google Workspace environments.
What would an administrator configure in the snippet to achieve this goal?

• A.Dynamic User Groups
• B.Tenant restrictions
• C.URL category
• D.Dynamic Address Groups

What will collect device information when a user has authenticated and connected to a GlobalProtect gateway?

• A.Session ID
• B.RADIUS Authentication
• C.Host information profile (HIP)
• D.IP address