Palto Guides d'étude, Notes de cours & Résumés

Palo Alto PCNSA Practice Test Bank Questions & Answers (all correct) 2022. What are two valid tag types for use in a DAG? (Choose two.) A. dynamic tag B. membership tag C. wildcard tag D. static tag *ANS- AD Which interface type is used to monitor traffic and cannot be used to perform traffic shaping? A. Virtual Wire B. Layer3 C. Layer2 D. Tap *ANS- D What is true about Panorama managed firewalls? A. Commit on local firewalls can be prohibited, which results in no configuratio...

Palo Alto Exam Questions and Answers In an HA configuration, which two failure detection methods rely on ICMP ping? (Choose two.) A. hellos B. heartbeats C. path monitoring D. link groups - Answer-B. heartbeats C. path monitoring The User-ID feature is enabled per __________? A. firewall B. User-ID agent C. firewall security zone D. firewall interface - Answer-C. firewall security zone What is a characteristic of Dynamic Admin Roles? A. Role privileges can be dyn...

Palo Alto PCCET Questions with Complete Solutions Who is the most likely target of social engineering? A. executive management, because it has the most permissions B. senior IT engineers, because the attacker hopes to get them to disable the security infrastructure C. junior people, because they are easier to stress and probably not as well trained D. the accounting department, because it can wire money directly to the attacker's account - Answer-C In the cyberattack lifecycle, what d...

Palo Alto PCCET Exam Questions with Answers What does the acronym CIDR represent? Classful Inter Dependant Routing Classless Inter-Domain Routing Classless Inter Dependant Routing Classful Inter Domain Routing - Answer-Classless Inter-Domain Routing Palo Alto Networks firewalls are built on which type of architecture? Multi-pass Ultimate-pass Single-pass Strict-pass - Answer-Single-pass Which physical or virtual device sends data packets to destination networks along a networ...

Palo Alto PCCET Questions with Correct Answers What does CVE mean? A. Computer Vulnerabilities and their Exploits B. Computer Vulnerabilities and Exposures C. Common Vulnerabilities and their Exploits D. Common Vulnerabilities and Exposures - Answer-D What is the difference between CVE and CVSS? A. CVE tells you what the vulnerabilities are. CVSS gives vulnerabilities a score (0-10) to evaluate how serious they are. B. CVE is on a scale of low, medium, high, critical. CVSS is on a scal...

Palo Alto 2024 Exam with Complete Solutions How to configure DMZ traffic from outside - Answer-Create a NAT policy destined for the OUTSIDE zone - Under translated packet tab Input server ip Create policy from source to DMZ What are zone protection profiles? - Answer-- First line of defense for non-ip protocols - Create the profile and add it to zone - Network, zone profiles (left), zones, look towards bottom of pop-up How to configure a port/int for management profile - Answer--...

Palo Alto Test 3 Questions with Answers Which four items are possible network traffic match criteria in a Security policy on a Palo Alto Networks firewall? (Choose four.) A. Source Zone B. Username C. DNS Domain D. URL E. Application - Answer-A. Source Zone B. Username D. URL E. Application Which of the three types of Security policy rules that can be created is the default rule type? A. intrazone B. interzone C. universal - Answer-C. universal The intrazone-default and inte...

Palo Alto 2024 Exam Questions with Revised Answers What does "Load configuration version" do? - Answer-Restore a previous version of the running configuration that is stored on the firewall. The firewall creates a version whenever you commit configuration changes. What does "Import named configuration snapshot" do? - Answer-Restore a running or candidate configuration that you previously exported to an external host. What does "Import device state" do? - Answer-Restore state inf...

Palo Alto Final Exam Questions with Answers All Correct When creating an application filter, which of the following is true? Select one: a. They are called dynamic because they will automatically include new applications from an application signature update if the new application's type is included in the filter b. Excessive bandwidth may be used as a filter match criteria c. They are called dynamic because they automatically adapt to new IP addresses d. They are used by malwa...

Palo Alto PCNSA Test Questions and Answers Which command backs up configuration files to a remote network device? A. import B. load C. copy D. export - Answer-D. export The command load named configuration snapshot overwrites the current candidate configuration with which three items? (Choose three.) A. custom‐named candidate configuration snapshot (instead of the default snapshot) B. custom‐named running configuration that you imported C. D. current running configuration (run...