Palo Alto Exam Questions With Correct
Answers.
What service is needed for updates? - answerDNS
What are the URL Filtering Security Profile actions? - answerAlert
Allow
Block
Continue
Override
How to mitigate vulnerabilities? - answer- Create v-object and add to security policy
Identities w...
Two types of clients - answer✔✔Integrated and Windows client
Methods for user mapping - answer✔✔Server monitor
Port Mapping
Syslog (login and logout events)
XFF header
Authentication Policy and Captive Portal
,BRIGHTSTARS EXAM STUDY SOLUTIONS 8/15/2024 2:05 PM
GlobalProtect
XML API
Client Probing
What database is in the data-plane cache? - answer✔✔Recently used URLs
Seed Database - answer✔✔A regional subset of the URL database
How are next gen FWs different from traditional FW - answer✔✔- URL filtering
- Has the ability to identify malicious packets (malware) by dynamically learning (updates from
internet). If info is unknown then it will send/ask the cloud
- Deep packet inspection
- Application Awareness with certain protocols
- User IDs (keeps track of User's IPs)
- Inspects encrypted packets
Deep packet inspection - answer✔✔Looking beyond L3 and L4
Application Awareness - answer✔✔Blocks certain aspects of an application
- Ex. Users can get into facebook, but not use messenger
How to next gen firewalls cover encrypted traffic? - answer✔✔Two tunnels are created.
One before and one after the FW. The FW inspects the app details before it re-encrypts data
How to start the initial config? - answer✔✔1. Connect to the device
2. Change the IP to the subnet of the routers interface
3. Add DNS and gateway
Are there other interfaces on the device? - answer✔✔Yes, a physical management interface
What command is needed for any changes in the CLI? - answer✔✔commit... this will add it to
running config
Where to find IP services in GUI? - answer✔✔Under devices
By default, which interface is used for routing traffic? - answer✔✔Management
You can add more or change
What to consider when update PAN-OS? - answer✔✔Update dynamic software first (anti-virus,
threat detection, etc)
, BRIGHTSTARS EXAM STUDY SOLUTIONS 8/15/2024 2:05 PM
How do updates work? - answer✔✔Go under device to software then hit "check now" at the
bottom
You can click "download" then "install"
**Dynamic software first***
What should you do before making adjustments to the FW? - answer✔✔See what kind of traffic
is coming in first
"Try the food before you salt it"
What is TAP mode/TAP interface? - answer✔✔Used for analyzing data
- Usually, the connected Cisco switch is using SPAN to replicate traffic
Can PAs distinguish between apps with the same protocol and port number? - answer✔✔Yes
How do virtual wire interfaces work? - answer✔✔For existing networks..
- You can add the FW between two routers
- There will be one virtual interface per router
- Both interfaces will be in the same subnet as the routers interface so traffic has to go through it
- Virtual interfaces will be d/d
- Does not do L2 forwarding
How to configure vInterfaces (vWire) - answer✔✔- Under network, then interfaces
- Add vWires to object (vWires on left)
- commit (allow pop ups if needed) and 20 lines
Layer 2 interface - answer✔✔- You can deploy the FW as a L2 switch
- Same infig under "network to interfaces"
How many interfaces can vWire support? - answer✔✔only 2
How does L3 work on FW? - answer✔✔Same as L2. Needs an IP and provides routing
capabilities
Les clients de Stuvia ont évalués plus de 700 000 résumés. C'est comme ça que vous savez que vous achetez les meilleurs documents.
L’achat facile et rapide
Vous pouvez payer rapidement avec iDeal, carte de crédit ou Stuvia-crédit pour les résumés. Il n'y a pas d'adhésion nécessaire.
Focus sur l’essentiel
Vos camarades écrivent eux-mêmes les notes d’étude, c’est pourquoi les documents sont toujours fiables et à jour. Cela garantit que vous arrivez rapidement au coeur du matériel.
Foire aux questions
Qu'est-ce que j'obtiens en achetant ce document ?
Vous obtenez un PDF, disponible immédiatement après votre achat. Le document acheté est accessible à tout moment, n'importe où et indéfiniment via votre profil.
Garantie de remboursement : comment ça marche ?
Notre garantie de satisfaction garantit que vous trouverez toujours un document d'étude qui vous convient. Vous remplissez un formulaire et notre équipe du service client s'occupe du reste.
Auprès de qui est-ce que j'achète ce résumé ?
Stuvia est une place de marché. Alors, vous n'achetez donc pas ce document chez nous, mais auprès du vendeur Brightstars. Stuvia facilite les paiements au vendeur.
Est-ce que j'aurai un abonnement?
Non, vous n'achetez ce résumé que pour €10,96. Vous n'êtes lié à rien après votre achat.
