Palo Alto 1-6 Test Questions with Correct Answers
What should be configured as the destination zone on the original packet tab of the NAT Policy rule in the Next Generation firewall?
Select one:
a. Untrust-L3
b. Any
c. Trust-L3
d. DMZ-L3 - Answer-Untrust-L3
Traffic going to a public I...
What should be configured as the destination zone on the original packet tab of the NAT
Policy rule in the Next Generation firewall?
Select one:
a. Untrust-L3
b. Any
c. Trust-L3
d. DMZ-L3 - Answer-Untrust-L3
Traffic going to a public IP address is being translated by a Next Generation firewall to
an internal server private IP address. Which IP address should the security policy use
as the destination IP in order to allow traffic to the server?
Select one:
a. The server public IP
b. The firewall Management port IP
c. The firewall gateway IP
d. The server private IP - Answer-The firewall gateway IP
Which source address translation type will allow multiple devices to share a single
translated source address while using a single NAT Policy rule on the Next Generation
firewall?
Select one:
a. Bi-Directional
b. Dynamic IP and Port
c. Static IP
d. Dynamic IP - Answer-Dynamic IP and Port
On the Next Generation firewall, if there is a NAT policy - there must also be a security
policy.
Select one:
True
False - Answer-True
, Security policy rules on the Next Generation firewall specify a source and a destination
interface.
Select one:
True
False - Answer-False
What feature on the Next Generation firewall can be used to identify, in real time, the
applications taking up the most bandwidth?
Select one:
a. Application Command Center (ACC)
b. Quality of Service Statistics
c. Applications Report
d. Quality of Service Log - Answer-Application Command Center (ACC)
What are the three pre-defined tabs in the Next Generation firewall Application
Command Center (ACC)?
Select one or more:
a. Network Traffic
b. Threat Activity
c. Blocked Activity
d. Application Traffic - Answer-Select one or more:
Network Traffic
Threat Activity
Blocked Activity
When creating an application filter, which of the following is true?
Select one:
a. They are called dynamic because they will automatically include new applications
from an application signature update if the new application's type is included in the filter
b. They are used by malware
c. Excessive bandwidth may be used as a filter match criteria
d. They are called dynamic because they automatically adapt to new IP addresses -
Answer-They are called dynamic because they will automatically include new
applications from an application signature update if the new application's type is
included in the filter
Which built-in administrator role allows all rights except for the creation of administrative
accounts and virtual systems?
a. superuser
b. custom role
c. deviceadmin
d. vsysadmin - Answer-deviceadmin
Which Next Generation VM Series Model requires a minimum of 16 GB of memory and
60 GB of dedicated disk drive capacity?
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Scholarsstudyguide. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $12.99. You're not tied to anything after your purchase.
