Palo Alto UPDATED ACTUAL Exam Questions and CORRECT Answers
0 view 0 purchase
Course
Palo Alto
Institution
Palo Alto
Palo Alto UPDATED ACTUAL Exam
Questions and CORRECT Answers
An Antivirus Security Profile specifies Actions and WildFire Actions. Wildfire Actions enable
you to configure the firewall to perform which operation?
A. Delete packet data when a virus is suspected.
B. Download new antivirus signa...
Palo Alto UPDATED ACTUAL Exam
Questions and CORRECT Answers
An Antivirus Security Profile specifies Actions and WildFire Actions. Wildfire Actions enable
you to configure the firewall to perform which operation?
A. Delete packet data when a virus is suspected.
B. Download new antivirus signatures from WildFire.
C. Block traffic when a WildFire virus signature is detected.
D. Upload traffic to WildFire when a virus is suspected. - CORRECT ANSWER✔✔- D.
Upload traffic to WildFire when a virus is suspected.
An Interface Management Profile can be attached to which two interface types? (Choose
two.)
A. Tap
B. Layer 2
C. Loopback
D. Layer 3
E. Virtual Wire - CORRECT ANSWER✔✔- C. Loopback
D. Layer 3
App-ID running on a firewall identifies applications using which three methods? (Choose
three.)
A. PAN-DB lookups
B. WildFire lookups
C. Application signatures
D. Program heuristics
E. Known protocol decoders - CORRECT ANSWER✔✔- C. Application signatures
D. Program heuristics
E. Known protocol decoders
,Application block pages can be enabled for which applications?
A. any
B. web-based
C. MGT port-based
D. non-TCP/IP - CORRECT ANSWER✔✔- B. web-based
Because a firewall examines every packet in a session, a firewall can detect application
________?
A. shifts
B. errors
C. groups
D. filters - CORRECT ANSWER✔✔- A. shifts
Finding URLs matched to the not-resolved URL category in the URL Filtering log file might
indicate that you should take which action?
A.Reboot the firewall.
B. Validate your Security policy rules.
C. Validate connectivity to the PAN-DB cloud.
D. Re-download the URL seed database. - CORRECT ANSWER✔✔- C. Validate
connectivity to the PAN-DB cloud.
For which firewall feature should you create forward trust and forward untrust certificates?
A. SSH decryption
B. SSL forward proxy decryption
C. SSL client-side certificate checking
, D. SSL Inbound Inspection decryption - CORRECT ANSWER✔✔- B. SSL forward proxy
decryption
If a DNS sinkhole is configured, any sinkhole actions indicating a potentially infected host
are recorded in which log type?
A. Data Filtering
B. WildFire Submissions
C. Threat
D. Traffic - CORRECT ANSWER✔✔- C. Threat
If there is an HA configuration mismatch between firewalls during peer negotiation, which
state will the passive firewall enter?
A. PASSIVE
B. NON-FUNCTIONAL
C. ACTIVE
D. INITIAL - CORRECT ANSWER✔✔- B. NON-FUNCTIONAL
In a destination NAT configuration, which option accurately completes the following
sentence? A Security policy rule should be written to match the _______.
A. original pre-NAT source and destination addresses, and the pre-NAT destination zone
B. original pre-NAT source and destination addresses, but the post-NAT destination zone
C. post-NAT source and destination addresses, and the post-NAT destination zone
D. post-NAT source and destination addresses, but the pre-NAT destination zone -
CORRECT ANSWER✔✔- B. original pre-NAT source and destination addresses, but the
post-NAT destination zone
In a Security Profile, which action does a firewall take when the profiles action is configured
as Reset Server? (Choose two.)
, A. For UDP sessions, the connection is reset.
B. For UDP sessions, the connection is dropped.
C. The client is reset.
D. The traffic responder is reset. - CORRECT ANSWER✔✔- B. For UDP sessions, the
connection is dropped.
D. The traffic responder is reset.
In an HA configuration, which three components are synchronized between the pair of
firewalls? (Choose three.)
A. policies
B. networks
C. objects
D. logs - CORRECT ANSWER✔✔- A. policies
B. networks
C. objects
In an HA configuration, which three functions are associated with the HA1 Control Link?
(Choose three.)
A. synchronizing sessions
B. synchronizing configuration
C. exchanging heartbeats
D. exchanging hellos - CORRECT ANSWER✔✔- B. synchronizing configuration
C. exchanging heartbeats
D. exchanging hellos
SSL Inbound Inspection requires that the firewall be configured with which two components?
(Choose two.)
A. client's digital certificate
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller MGRADES. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $10.99. You're not tied to anything after your purchase.
