Palo Alto Practice Test Questions with Revised Answers
9 vues 0 fois vendu
Cours
Palo Alto
Établissement
Palo Alto
Palo Alto Practice Test Questions with Revised Answers
Which action in a Security policy rule results in traffic being silently rejected?
Select one:
a. Deny
b. Drop
c. Reset Server
d. Reset Client - Answer-Reset Server
Which NGFW security policy rule applies to all matching traffic within...
Palo Alto Practice Test Questions
with Revised Answers
Which action in a Security policy rule results in traffic being silently rejected?
Select one:
a. Deny
b. Drop
c. Reset Server
d. Reset Client - Answer-Reset Server
Which NGFW security policy rule applies to all matching traffic within the specified
source zones?
Select one:
a. Default
b. Interzone
c. Intrazone
d. Universal - Answer-Intrazone
Which type of Security policy rule is the default rule type?
Select one:
a. Interzone
b. Intrazone
c. Universal
d. Default - Answer-Interzone
In the Palo Alto Networks Application Command Center (ACC), which filter allows you to
limit the display to the details you care about right now and to exclude the unrelated
information from the current display?
Select one:
a. Global
b. Universal
c. Group
d. Local - Answer-Global
Select the answer that best completes this sentence. Source NAT commonly is used for
_________ users to access the ________ internet. - Answer-private, public
Select the answer that completes this sentence. DIPP source NAT will support a
maximum of about ______________ concurrent sessions on each IP address
configured within the NAT pool.
Select one:
a. 64,000
b. 250
,c. 16,300
d. 8100 - Answer-64,000
Which one of the following statements is true about NAT rules?
Select one:
a. The destination zone in the security rule is determined before the route lookup of the
post-NAT destination IP address.
b. NAT rules are applied after security policy rules.
c. The addresses used in source NAT rules always refer to the original IP address in the
packet (that is, the pre-translated address).
d. NAT rules provide address translation, while security policy rules allow or deny
packets. - Answer-NAT rules provide address translation, while security policy rules
allow or deny packets.
What feature on the Next Generation firewall can be used to identify, in real time, the
applications taking up the most bandwidth?
Select one:
a. Quality of Service Log
b. Quality of Service Statistics
c. Application Command Center (ACC)
d. Applications Report - Answer-Application Command Center (ACC)
What are the three pre-defined tabs in the Next Generation firewall Application
Command Center (ACC)?
Choose the 3 correct choices.
If you choose an incorrect choice your question score will be deducted.
Select one or more:
a. Network Traffic
b. Blocked Activity
c. Application Traffic
d. Threat Activity - Answer-Network Traffic
Threat Activity
Blocked Activity
When using config audit to compare configuration files on a Next Generation firewall,
what does the yellow indication reveal?
Select one:
a. Change
b. Addition
c. None
d. Deletion - Answer-Change
In the Palo Alto Networks Firewall WebUI, which type of report can be compiled into a
single emailed PDF?
Select one:
, a. Predefined
b. PDF Summary
c. Group
d. Botnet - Answer-Group
On the Palo Alto Networks Next Generation Firewall, which is the default port for
transporting Syslog traffic?
Select one:
a. 6514
b. 443
c. 8080
d. 514 - Answer-514
When creating an application filter, which of the following is true? - Answer-They are
called dynamic because they will automatically include new applications from an
application signature update if the new application's type is included in the filter
Select True or False. On the Next Generation firewall, application groups are always
automatically updated when new applications are added to the App-ID database. -
Answer-False
A strength of the Palo Alto Networks firewall is:
a. hardware consolidation - data and control plane processing is improved and
performed in successive linear fasion
b. increased buffering capability.
c. its single-pass parallel processing (SP3) engine and software performs operations
once per packet - Answer-its single-pass parallel processing (SP3) engine and software
performs operations once per packet
Select True or false. The CN-Series firewalls deliver the same capabilities as the PA-
Series and VM-Series firewalls - Answer-true
Select True or False. Traffic protection from external locations where the egress point is
the perimeter is commonly referred to as "North-South" traffic. - Answer-True
The first important task of building a Zero Trust Architecture is to identify
__________________.
a. the protect surface
b. traffic
c. interdependencies
d. microperimete - Answer-the protect surface
What is the method used to create a Zero Trust policy that answers the 'who, what,
when, where, why and how' definition?
a. Logging
Les avantages d'acheter des résumés chez Stuvia:
Qualité garantie par les avis des clients
Les clients de Stuvia ont évalués plus de 700 000 résumés. C'est comme ça que vous savez que vous achetez les meilleurs documents.
L’achat facile et rapide
Vous pouvez payer rapidement avec iDeal, carte de crédit ou Stuvia-crédit pour les résumés. Il n'y a pas d'adhésion nécessaire.
Focus sur l’essentiel
Vos camarades écrivent eux-mêmes les notes d’étude, c’est pourquoi les documents sont toujours fiables et à jour. Cela garantit que vous arrivez rapidement au coeur du matériel.
Foire aux questions
Qu'est-ce que j'obtiens en achetant ce document ?
Vous obtenez un PDF, disponible immédiatement après votre achat. Le document acheté est accessible à tout moment, n'importe où et indéfiniment via votre profil.
Garantie de remboursement : comment ça marche ?
Notre garantie de satisfaction garantit que vous trouverez toujours un document d'étude qui vous convient. Vous remplissez un formulaire et notre équipe du service client s'occupe du reste.
Auprès de qui est-ce que j'achète ce résumé ?
Stuvia est une place de marché. Alors, vous n'achetez donc pas ce document chez nous, mais auprès du vendeur Scholarsstudyguide. Stuvia facilite les paiements au vendeur.
Est-ce que j'aurai un abonnement?
Non, vous n'achetez ce résumé que pour €12,98. Vous n'êtes lié à rien après votre achat.
