フリー問題

Palo Alto Networks Certified Cloud Security Engineer のフリー問題 10 / 20 問目

問題文

A team defines a group by picking the production machines it knows about today. Six months later, half of production is not covered. What property of the alternative would have prevented that?

選択肢

  1. A hand-picked group would have covered them because it matches by name pattern, so any machine named after the production prefix joins it as soon as it exists.
  2. A hand-picked group can be configured to re-evaluate on a schedule, which is the recommended way to keep it current, so the failure here was in not enabling that scheduled refresh rather than in the choice of group type.
  3. Nothing would have prevented it; groups do not affect coverage, since scanning reaches every asset in the account whether or not some group happens to name it.
  4. A group defined by filters keeps evaluating the criteria, so assets created later that satisfy them are included without anyone editing the group.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。