Palo Alto Exam Questions With Correct
Answers.
What service is needed for updates? - answerDNS
What are the URL Filtering Security Profile actions? - answerAlert
Allow
Block
Continue
Override
How to mitigate vulnerabilities? - answer- Create v-object and add to security policy
Identities w...
Two types of clients - answer✔✔Integrated and Windows client
Methods for user mapping - answer✔✔Server monitor
Port Mapping
Syslog (login and logout events)
XFF header
Authentication Policy and Captive Portal
,BRIGHTSTARS EXAM STUDY SOLUTIONS 8/15/2024 2:05 PM
GlobalProtect
XML API
Client Probing
What database is in the data-plane cache? - answer✔✔Recently used URLs
Seed Database - answer✔✔A regional subset of the URL database
How are next gen FWs different from traditional FW - answer✔✔- URL filtering
- Has the ability to identify malicious packets (malware) by dynamically learning (updates from
internet). If info is unknown then it will send/ask the cloud
- Deep packet inspection
- Application Awareness with certain protocols
- User IDs (keeps track of User's IPs)
- Inspects encrypted packets
Deep packet inspection - answer✔✔Looking beyond L3 and L4
Application Awareness - answer✔✔Blocks certain aspects of an application
- Ex. Users can get into facebook, but not use messenger
How to next gen firewalls cover encrypted traffic? - answer✔✔Two tunnels are created.
One before and one after the FW. The FW inspects the app details before it re-encrypts data
How to start the initial config? - answer✔✔1. Connect to the device
2. Change the IP to the subnet of the routers interface
3. Add DNS and gateway
Are there other interfaces on the device? - answer✔✔Yes, a physical management interface
What command is needed for any changes in the CLI? - answer✔✔commit... this will add it to
running config
Where to find IP services in GUI? - answer✔✔Under devices
By default, which interface is used for routing traffic? - answer✔✔Management
You can add more or change
What to consider when update PAN-OS? - answer✔✔Update dynamic software first (anti-virus,
threat detection, etc)
, BRIGHTSTARS EXAM STUDY SOLUTIONS 8/15/2024 2:05 PM
How do updates work? - answer✔✔Go under device to software then hit "check now" at the
bottom
You can click "download" then "install"
**Dynamic software first***
What should you do before making adjustments to the FW? - answer✔✔See what kind of traffic
is coming in first
"Try the food before you salt it"
What is TAP mode/TAP interface? - answer✔✔Used for analyzing data
- Usually, the connected Cisco switch is using SPAN to replicate traffic
Can PAs distinguish between apps with the same protocol and port number? - answer✔✔Yes
How do virtual wire interfaces work? - answer✔✔For existing networks..
- You can add the FW between two routers
- There will be one virtual interface per router
- Both interfaces will be in the same subnet as the routers interface so traffic has to go through it
- Virtual interfaces will be d/d
- Does not do L2 forwarding
How to configure vInterfaces (vWire) - answer✔✔- Under network, then interfaces
- Add vWires to object (vWires on left)
- commit (allow pop ups if needed) and 20 lines
Layer 2 interface - answer✔✔- You can deploy the FW as a L2 switch
- Same infig under "network to interfaces"
How many interfaces can vWire support? - answer✔✔only 2
How does L3 work on FW? - answer✔✔Same as L2. Needs an IP and provides routing
capabilities
Los beneficios de comprar resúmenes en Stuvia estan en línea:
Garantiza la calidad de los comentarios
Compradores de Stuvia evaluaron más de 700.000 resúmenes. Así estas seguro que compras los mejores documentos!
Compra fácil y rápido
Puedes pagar rápidamente y en una vez con iDeal, tarjeta de crédito o con tu crédito de Stuvia. Sin tener que hacerte miembro.
Enfócate en lo más importante
Tus compañeros escriben los resúmenes. Por eso tienes la seguridad que tienes un resumen actual y confiable.
Así llegas a la conclusión rapidamente!
Preguntas frecuentes
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
100% de satisfacción garantizada: ¿Cómo funciona?
Nuestra garantía de satisfacción le asegura que siempre encontrará un documento de estudio a tu medida. Tu rellenas un formulario y nuestro equipo de atención al cliente se encarga del resto.
Who am I buying this summary from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Brightstars. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy this summary for 10,94 €. You're not tied to anything after your purchase.