-->

whaust

2023年1月2日 星期一

PSE Foundation - Assessment (2023/1/3)

Special thanks the people from India !

you are my good friend and supporter !

thank you people from : Andhra Pradesh, Telangana, Madhya Pradesh, Tamil Nadu, Maharashtra, Delhi, Odisha, Uttar Pradesh, West Bengal, Bihar, Gujarat, Haryana, Karnataka, Chhattisgarh.


---

Question 1 of 23


Which security model specifically addresses the security of sensitive data and critical applications in an enterprise organization?



the Zero Trust posture


App-ID


decryption


The Kipling Method


(B)


---


Question 2 of 23


What is one difference between App-ID and User-ID?



App-ID depends on User-ID, but User-ID does not depend on App-ID.


App-ID identifies which application is associated with traffic; User-ID identifies which users are associated with traffic.


App-ID identifies the port to which packets should be sent; User-ID identifies the user to whom packets should be sent.


App-ID refers to security rule criteria; User-ID refers to traffic monitoring criteria.


(B)


---


Palo Alto Networks provides which three pillars? (Choose three.)


Select All Correct Responses



Prisma


Strata


Cortex


Cybersecurity


AutoFocus


(A)(B)(C)


---


Question 4 of 23


Which security operations product applies machine learning at cloud scale to rich network, endpoint, and cloud data?



Cortex Data Lake


Security Lifecycle Review


Cortex XDR


Cortex XSOAR


(A)


---


Question 5 of 23


Which Prisma product secures access to the internet and business applications that are hosted in SaaS, a corporate data center, or public clouds?



Prisma Cloud


Prisma Access (SASE)


Prisma SaaS


Prisma Secure Network


(D)


---


Which Prisma product provides comprehensive visibility and threat detection across an organization’s hybrid, multi-cloud infrastructure?



Prisma Cloud


Prisma Access (SASE)


Prisma SaaS


Cloud Network Security Platform


(A)


---


Question 7 of 23

 

Which Prisma product is a multi-mode cloud access security broker (CASB) service that enables customers to manage sanctioned SaaS application usage across all users in the organization and reduce the risk of breaches and non-compliance?



Prisma Cloud


Prisma Access (SASE)


Prisma SaaS


Prisma Secure Network


(B)


---


Question 8 of 23

 

Which option describes the breadth of Palo Alto Networks offerings?



Palo Alto Networks provides consistent cybersecurity for networks, endpoints, and cloud environments.


Palo Alto Networks supplies routers, bridges, and firewalls, but no servers.


Palo Alto Networks focuses on protecting IoT endpoints from known viruses.


Palo Alto Networks provides consistent security for social networks and the AI necessary to prevent fake or distorted news, audio, and video content.


(A)


--- 


Question 9 of 23

 

What does automation in a security platform help provide?



a consistent security policy in a dynamically changing compute environment


visibility sensors throughout multiple deployment scenarios


a centralized, organized repository for accurate data that behavior analytics software can leverage


recognition of attack techniques that leverage known weaknesses in operating systems and applications


(A)


---


Question 10 of 23

 

What is the name of the Palo Alto Networks partner program?



NextWave Partner Program


CYBERFORCE


Managed Services Program


Partner Relationship Management


(A)


---


Question 11 of 23

 

What is CYBERFORCE?



partner technical recognition program


technical support team


partner portal name


authorized training partners program


(A)


---


Question 12 of 23

 

Which PSE training has a micro-credential as a Professional certification?



PSE SASE


PSE Cortex


PSE Strata


PSE Prisma Cloud


(D)


---


Question 13 of 23

 

Which platform function does Panorama perform?



early visibility into new features of the firewall's operating system


centralized management for multiple firewalls


execution of unknown malware in an isolated environment


identification of previously unknown malware and generation of signatures


(B)


---


Question 14 of 23

 

What service does WildFire provide?



to provide cloud-delivered malware analysis on submitted files


to perform general-purpose hash generation and matching


to provide an additional source of configuration rules for firewalls


to produce an Analysis Summary that summarizes a firewall’s ability to reduce the attack surface of an environment


(A)


---


Question 15 of 23

 

What is the definition of a security rule in a Strata firewall?



a legal compliance regulation downloaded to the Strata firewall


a filtering mechanism that specifies how the Monitor and ACC display data


an element of the Security policy that specifies the action to take based on a match of zones, users, applications, and other session criteria


a specification for whether the firewall is to provide prevention, remediation, or attack surface reduction


(C)


---


Question 16 of 23

 

What is the Palo Alto Networks preferred method of reducing the attack surface of an environment?



alerting when a known or unknown threat has entered a firewall


reporting on all sensitive data that has been made publicly available on the internet


identifying unusual traffic to a server with confidential information


allowing only traffic explicitly defined by the application, user, and content


(D)


---


Question 17 of 23

 

What is the core functional role of automation to convert the detection of a threat?



respond to alerts


record alerts


prevent a threat


promote trust


(C)

---


Question 18 of 23

 

Which Secure the Cloud architecture removes the requirement to backhaul data traffic?



Prisma Cloud


Prisma SaaS


Prisma Secure


Prisma Access


(D)


---


Question 19 of 23

 

Which feature allows policy to automatically adapt based on changes to servers?



User-ID


Content-ID


Dynamic Address Group


App-ID


(C)


---


Question 20 of 23

 

Which Palo Alto Networks technology uses machine learning and behavioral analytics for endpoint threat detection?



Cortex XDR


Prisma SaaS


Strata


advanced signatures


(A)


---


Question 21 of 23

 

Which Palo Alto Networks technology combines security orchestration, incident management, and interactive investigation?



Cortex XDR


Strata


Prisma Access


Cortex XSOAR


(D)


---


Question 22 of 23

 

Which Prisma product automatically assesses risk through content, activity, and security control policies for cloud-delivered applications?



Prisma Access


Prisma SaaS


Prisma Cloud


Prisma Delivery


(B)


---


Question 23 of 23

 

Which patented inspection process enables the firewall administrator to gain visibility and ensure that only those who have a business need have access to an application?



Content-ID


App-ID


User-ID


Dynamic Address Group


(B)


--- 


have fun !



2022年12月22日 星期四

2022/12/22

 How to restart a pod without a deployment in K8S?

https://stackoverflow.com/questions/65156414/how-to-restart-a-pod-without-a-deployment-in-k8s


Full-cluster restart and rolling restart

https://www.elastic.co/guide/en/elasticsearch/reference/8.5/restart-cluster.html#restart-cluster-rolling


我如何為 elasticsearch 生成註冊令牌以連接 kibana?

https://elasticstack.blog.csdn.net/article/details/125989411


Elasticsearch:使用不同的 CA 更新安全证书 (二)

https://blog.csdn.net/UbuntuTouch/article/details/125993452


Cannot run elasticsearch with security best practice readOnlyRootFilesystem: true

https://github.com/elastic/cloud-on-k8s/issues/6126


Set up basic security for the Elastic Stack

https://www.elastic.co/guide/en/elasticsearch/reference/8.5/security-basic-setup.html



Problem with configuring https x-pack

https://discuss.elastic.co/t/problem-with-configuring-https-x-pack/292509


elasticSearch(三)window报错:org.elasticsearch.ElasticsearchSecurityException:

https://huaweicloud.csdn.net/search?q=elasticSearch%EF%BC%88%E4%B8%89%EF%BC%89window%E6%8A%A5%E9%94%99%EF%BC%9Aorg.elasticsearch.ElasticsearchSecurityException%3A


Running Elasticsearch, Logstash, and Kibana on Kubernetes with Helm

https://coralogix.com/blog/elasticsearch-logstash-kibana-on-kubernetes/


Cluster health API

https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-health.html#


Deploy a secure instance of Elasticsearch on Kubernetes

在 Kubernetes 上部署 Elasticsearch 的安全實例

https://pimwiddershoven.nl/entry/deploy-a-secure-instance-of-elasticsearch-on-kubernetes


Update security certificates with a different CA

https://www.elastic.co/guide/en/elasticsearch/reference/current/update-node-certs-different.html



接下來呢?

https://docs.netapp.com/zh-tw/trident/trident-get-started/kubernetes-postdeployment.html#%E6%AD%A5%E9%A9%9F1%E5%BB%BA%E7%AB%8B%E5%BE%8C%E7%AB%AF


與營運者一起升級

https://docs.netapp.com/zh-tw/trident/trident-managing-k8s/upgrade-operator.html#%E5%8D%87%E7%B4%9A%E5%8F%A2%E9%9B%86%E7%AF%84%E5%9C%8D%E5%85%A7%E7%9A%84%E6%93%8D%E4%BD%9C%E5%93%A1%E5%AE%89%E8%A3%9D


與Trident營運者一起部署

https://docs.netapp.com/zh-tw/trident/trident-get-started/kubernetes-deploy-operator.html#%E6%9C%89%E9%97%9Castra-trident%E7%9A%84%E9%87%8D%E8%A6%81%E8%B3%87%E8%A8%8A22-10


Connecting Applications with Services

https://kubernetes.io/docs/tutorials/services/connect-applications-service/


Day 23: 使用 VS Code 來開發 PHP & Laravel

https://ithelp.ithome.com.tw/articles/10226612


Elasticsearch Helm Chart

https://github.com/elastic/helm-charts/tree/main/elasticsearch


The cluster-info ConfigMap does not yet contain a JWS signature for token ID "cjxj26"

https://stackoverflow.com/questions/68387634/the-cluster-info-configmap-does-not-yet-contain-a-jws-signature-for-token-id-cj


kubernetes报错笔记 (一) calico报错 原创

https://blog.51cto.com/u_14205795/4560662


kubernetes Releases

https://kubernetes.io/releases/


Elastic StackのSSL、TLS、HTTPS設定

https://qiita.com/hamingcode/items/3585053ab8b81fe6532c


污点和容忍度

https://kubernetes.io/zh-cn/docs/concepts/scheduling-eviction/taint-and-toleration/


Missing taint: node.kubernetes.io/unreachable:NoExecute when nodes enter NotReady state

https://github.com/kubernetes/kubernetes/issues/101674


Taints and Tolerations

https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/#taint-based-evictions


pod calico-node on worker nodes with 'CrashLoopBackOff'

https://github.com/projectcalico/calico/issues/2720


A lot of kubelet errors : Failed to update stats for container

https://stackoverflow.com/questions/32435859/a-lot-of-kubelet-errors-failed-to-update-stats-for-container


Creating a cluster with kubeadm

https://v1-24.docs.kubernetes.io/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/


【從題目中學習k8s】-【Day8】K8s常用指令 (Cheat Sheet)&解題技巧

https://ithelp.ithome.com.tw/articles/10236404


kubectl 备忘单

https://kubernetes.io/zh-cn/docs/reference/kubectl/cheatsheet/


Node type

https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#node-roles


Start the Elastic Stack with security enabled automatically

https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-stack-security.html


HTTPS on elasticsearch helm chart

https://stackoverflow.com/questions/63339235/https-on-elasticsearch-helm-chart

https://github.com/elastic/helm-charts/blob/main/elasticsearch/examples/security/values.yaml






[Day12] 實作 Kubernetes 裸機 Load Balancer Part2

https://ithelp.ithome.com.tw/articles/10221722


How can I write and append using echo command to a file

https://stackoverflow.com/questions/17189237/how-can-i-write-and-append-using-echo-command-to-a-file


ELK Stack 2 - Secure ELK Stack

https://ithelp.ithome.com.tw/articles/10216666


Enable Elasticsearch security featuresedit

https://www.elastic.co/guide/en/elasticsearch/reference/8.5/get-started-enable-security.html


Internal DNS

https://cloud.google.com/compute/docs/internal-dns?hl=zh-tw


How to Setup Metal LB for Nginx Ingress Loadbalancer IP in Kubernetes 1.25.4

https://hackmd.io/X3I6IwWESzG0agAgsRpg6A?view#How-to-Setup-Metal-LB-for-Nginx-Ingress-Loadbalancer-IP-in-Kubernetes-1254


metallb troubleshooting

https://metallb.universe.tf/configuration/troubleshooting/


[Day12] 實作 Kubernetes 裸機 Load Balancer Part2

https://ithelp.ithome.com.tw/articles/10221722


[ Kube 33.1 ] How to deploy & use MetalLB in bare metal Kubernetes

https://www.youtube.com/watch?v=2SmYjj-GFnE&t=640s



Enforce Pod Security Standards with Namespace Labels

https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/


Bare-metal considerations¶

https://kubernetes.github.io/ingress-nginx/deploy/baremetal/


Pod Security Admission

https://kubernetes.io/docs/concepts/security/pod-security-admission/


metallb installation

https://metallb.universe.tf/installation/


Metallb LoadBalancer is stuck on pending

https://stackoverflow.com/questions/66124430/metallb-loadbalancer-is-stuck-on-pending


metallb external ip pending

https://github.com/metallb/metallb/issues?q=pending



How To Deploy Logstash and Filebeat On Kubernetes With ECK and SSL

https://raphaeldelio.com/deploy-logstash-and-filebeat-on-kubernetes-with-eck-ssl-and-filebeat-d9f616737390


Can change clusterip to nodeport command line without editor?

https://stackoverflow.com/questions/51113399/can-change-clusterip-to-nodeport-command-line-without-editor


我如何為 elasticsearch 生成註冊令牌以連接 kibana?

https://stackoverflow.com/questions/71204472/how-can-i-generate-enrollment-token-for-elasticsearch-to-connect-with-kibana


2022年12月10日 星期六

脅威ハンティング手順 (Threat Hunting Steps)

 Threat Hunting には次のようなステップが含まれます。


1. 目標を定義する:Threat Hunting の計画の目標を明確にする。

2. 検知ルールを設定する:異常な活動を検知するためのルールを設定する。

3. データを収集して分析する:関連するデータを収集して分析する。

4. 脅威を調査して識別する:潜在的な脅威を調査して識別する。

5. 結果を評価して報告する:Threat Hunting の活動の効果を評価し、結果を報告する。


これらのステップは人工知能や機械学習の技術、専門知識や経験を組み合わせる必要があります。有効な Threat Hunting の計画を作成するには、適切なツールやリソース、専門的なチームメンバーが必要です。


人工知能や機械学習は、データの収集と分析を自動化し、異常な活動を検知するのに役立ちます。専門知識や経験は、脅威を特定し、目的や動機を推測し、脅威を阻止するための有効な行動をとるのに役立ちます。


有効な Threat Hunting の計画を作成するには、専門的なチームメンバーと適切なツールやリソースが必要です。これらのツールやリソースには、情報収集プラットフォーム、データ分析ソフトウェア、脅威検知システムなどが含まれます。これらのツールやリソースは、大量のデータを収集し分析し、潜在的な脅威を検知するのに役立ちます。




2022年11月29日 星期二

2022年11月28日 星期一

20221128

 # traefik github 

  https://github.com/traefik/traefik

# 安裝 traefik

  https://jimmysong.io/kubernetes-handbook/practice/traefik-ingress-installation.html

  https://github.com/rootsongjc/kubernetes-handbook/tree/master/manifests/traefik-ingress

  https://github.com/yiyu0x/k8s-traefik-example

# kubernetes二: kubernetes 重要组件安装和集群管理

  https://blog.51cto.com/u_14183032/4903615

# [Kubernetes] 設定 Ingress Controller (以 Traefik 為例)

  https://godleon.github.io/blog/Kubernetes/k8s-Install-traefik-as-Ingress-Controller/

# k8s Deployment

  https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

# [Day16] k8s之PV小整合:Pod、Deployment、Service、Job與PersistentVolume

  https://ithelp.ithome.com.tw/articles/10223217

# [Day 8] 還在用Replication Controller嗎?不妨考慮Deployment

  https://ithelp.ithome.com.tw/articles/10194152

# Elastic Docs› Elastic Cloud on Kubernetes [2.5]

  https://www.elastic.co/guide/en/cloud-on-k8s/2.5/k8s-overview.html

# Ingress Controllers

  https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/

# 第 3 堂課 - LACP 與 bonding/team 及 IPv6 簡易設定

  https://dic.vbird.tw/linux_server/unit03.php

# NPIV

  https://www.google.com/search?q=NPIV&oq=NPIV&aqs=chrome..69i57j0i512l9.824j0j7&sourceid=chrome&ie=UTF-8

# Rancher 新用户指南

  https://docs.ranchermanager.rancher.io/zh/pages-for-subheaders/new-user-guides

  https://docs.ranchermanager.rancher.io/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli

# Kubernetes Cluster in Minutes in VMware vSphere using Rancher

  https://www.youtube.com/watch?v=lKzkgmR6A2A

# Rancher 安裝 trident  

  https://docs.netapp.com/zh-tw/hci/docs/task_rancher_trident.html

# Install Traefik

  https://doc.traefik.io/traefik/getting-started/install-traefik/#use-the-official-docker-image

# Kubernetes StatefulSet - Examples & Best Practices

  https://loft.sh/blog/kubernetes-statefulset-examples-and-best-practices/

# Kubernetes PVC Guide: Basics, Tutorials and Troubleshooting Tips

  https://komodor.com/learn/kubernetes-pvc-guide-basic-tutorial-and-troubleshooting-tips/

# Persistent Volumes

  https://kubernetes.io/docs/concepts/storage/persistent-volumes/

# How to Create kubernetes Role for Service Account

  https://devopscube.com/create-kubernetes-role/

# Kubernetes StatefulSet - Examples & Best Practices

  https://loft.sh/blog/kubernetes-statefulset-examples-and-best-practices/

# 在 K8S 中使用 Traefik 作為 Ingress Controllers

  https://github.com/yiyu0x/k8s-traefik-example

# Deploy a Production Ready Kubernetes Cluster

  https://github.com/kubernetes-sigs/kubespray/blob/master/README.md

# 以 eBPF 構建一個更為堅韌的 Kubernetes 叢集

  https://www.slideshare.net/hongweiqiu/ebpf-kubernetes?from_action=save

# “源来如此”开源技术公开课第八期:CKA考前重点实战讲解

  https://training.linuxfoundation.cn/videos/11

  https://www.bilibili.com/video/BV1Mq4y1s7JW/?zw

# Storage Classes

  https://kubernetes.io/docs/concepts/storage/storage-classes/

# Deploy Elasticsearch and Kibana Cluster on Kubernetes with Elasticsearch Operator

  https://medium.com/rahasak/deploy-elasticsearch-and-kibana-cluster-on-kubernetes-with-elasticsearch-operator-79f205170f40

# Elastic Cloud on Kubernetes

  https://www.elastic.co/guide/en/cloud-on-k8s/master/k8s-check-samples.html

  https://www.elastic.co/guide/en/cloud-on-k8s/master/k8s-install-yaml-manifests.html#k8s-install-yaml-manifests

# EtherChannel

  https://www.jannet.hk/etherchannel-pagp-lacp-zh-hant/

# Persistent Volumes

  https://kubernetes.io/docs/concepts/storage/persistent-volumes/

  https://learning.edx.org/course/course-v1:LinuxFoundationX+LFS158x+1T2022/block-v1:LinuxFoundationX+LFS158x+1T2022+type@sequential+block@c62bc66c97f24fa490cf42b58abc455b/block-v1:LinuxFoundationX+LFS158x+1T2022+type@vertical+block@a5d8e4c381e549de95762f5abe314ba6

  

  

# 雲端現代化的商業價值

https://hktw-resources.awscloud.com/whitepapers/business-value-of-cloud-modernization-whitepaper-tc?trk=9bbff2ce-cad2-4816-8c15-2f30d784b934&sc_channel=psm&fbclid=IwAR3h-qesiPcy0rLYnt9Fac-CFQXSey50_pvclVX8iwQlDKUyyPoqGJvJY5Y

# Setting up Azure Classroom Labs for your students with Azure Lab Services

https://techcommunity.microsoft.com/t5/educator-developer-blog/setting-up-azure-classroom-labs-for-your-students-with-azure-lab/ba-p/381181

# BAS那点事儿

https://xz.aliyun.com/t/11880#toc-6



# OpenRan

  https://opennetworking.org/open-ran/

# Aether-in-a-Box for Developers

  https://docs.aetherproject.org/master/developer/aiab.html#proxy-settings-conditional

# Setting Up Aether-in-a-Box

  https://docs.aetherproject.org/aether-1.5/developer/aiab.html

# Aether Documentation

  https://docs.aetherproject.org/master/index.html

# Aether

  https://opennetworking.org/aether/

# Community

  https://wiki.opennetworking.org/display/COM/Aether

# SD-Core Public

  https://drive.google.com/drive/u/0/folders/1dM5b0B65LkQQ0dGK1m-iIceRJfAASEm1  

# 遠傳首發!成功測試高空無人載具延伸 5G 信號涵蓋

  https://technews.tw/2019/09/23/fetnet-test-air-extension-5g-coverage/


[Trouble Shooting]

# Kubernetes stuck on ContainerCreating

  https://serverfault.com/questions/728727/kubernetes-stuck-on-containercreating

# Docker installation

  https://docs.docker.com/engine/install/centos/

# Run a Stateless Application Using a Deployment

  https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/

# What is the proper way to uninstall and clean up the Traefik Helm Charts?

  https://community.traefik.io/t/what-is-the-proper-way-to-uninstall-and-clean-up-the-traefik-helm-charts/11343


零信任ABCDE原則 (ABCDE Principles)


* Assume nothing(不做任何假定) 


* Believe nobody(不相信任何人) 

* Check everything(隨時檢查一切)

* Defeat dynamic risks(防範動態威脅)

* Expect for the worst(做最壞打算)



Popular