Palo Alto Test 3 Questions with Answers
Which four items are possible network traffic match criteria in a Security policy on a Palo Alto Networks firewall? (Choose four.)
A. Source Zone
B. Username
C. DNS Domain
D. URL
E. Application - Answer-A. Source Zone
B. Username
D. URL
E. Applica...
Palo Alto Test 3 Questions
with Answers
Which four items are possible network traffic match criteria in a Security policy on a
Palo Alto Networks firewall? (Choose four.)
A. Source Zone
B. Username
C. DNS Domain
D. URL
E. Application - Answer-A. Source Zone
B. Username
D. URL
E. Application
Which of the three types of Security policy rules that can be created is the default rule
type?
A. intrazone
B. interzone
C. universal - Answer-C. universal
The intrazone-default and interzone-default rules cannot be modified.
A. True
B. False - Answer-A. True
Which three items are names of valid source NAT translation types? (Choose three.)
A. dynamic IP
B. dynamic IP/Port
C. port forwarding
D. static - Answer-A. dynamic IP
B. dynamic IP/Port
D. static
Logging on intrazone-default and interzone-default Security policy rules is enabled by
default
A. True
B. False - Answer-B. False
Which four models are the Palo Alto Networks next-generation firewall models?
(Choose four.)
A. PA-200 Series
,B. PA-300 Series
C. PA-3200 Series
D. PA-400 Series
E. PA-5000 Series
F. PA-7000 Series - Answer-A. PA-200 Series
C. PA-3200 Series
E. PA-5000 Series
F. PA-7000 Series
Which two planes are found in Palo Alto Networks single-pass platform architecture?
(Choose two.)
A. control
B. single pass
C. data
D. parallel processing - Answer-A. control
C. data
The strength of the Palo Alto Networks firewall is its Single-Pass Parallel Processing
(SP3) engine.
A. True
B. False - Answer-A. True
Which new firewall model was introduced with PAN-OS 8.1 with double the data plane
memory?
A. PA-5260
B. PA-5270
C. PA-5280
D. PA_5290 - Answer-C. PA-5280
Palo Alto firewalls are built with a dedicated out-of-band management that has which
three attributes?
A. Labeled MGT by default
B. Passes only management traffic for the device and cannot be configured as a
standard traffic port
C. Administrators use the out-of-band management port for direct connectivity to the
management plane of the firewall.
D. Cannot be configured to use DHCP - Answer-A. Labeled MGT by default
B. Passes only management traffic for the device and cannot be configured as a
standard traffic port
C. Administrators use the out-of-band management port for direct connectivity to the
management plane of the firewall.
Which three statements are true regarding the candidate configuration?
A. You can roll back the candidate configuration by pressing the Undo button
B. You can revert the candidate configuration to the running configuration
C. Clicking Save creates a copy of the candidate configuration
, D. Choosing Commit updates the running configuration with the contents of the
candidate configuration. - Answer-B. You can revert the candidate configuration to the
running configuration
C. Clicking Save creates a copy of the candidate configuration
D. Choosing Commit updates the running configuration with the contents of the
candidate configuration.
True or False? Firewall administrator accounts can be individualised for user needs,
granting or restricting permissions as appropriate?
A. True
B. False - Answer-A. True
An Antivirus Security Profile specifies Actions and WildFire Actions. Wildfire Actions
enable you to configure the firewall to perform which operation?
A. Delete packet data when a virus is suspected.
B. Download new antivirus signatures from WildFire.
C. Block traffic when a WildFire virus signature is detected.
D. Upload traffic to WildFire when a virus is suspected. - Answer-D. Upload traffic to
WildFire when a virus is suspected.
An Interface Management Profile can be attached to which two interface types?
(Choose two.)
A. Tap
B. Layer 2
C. Loopback
D. Layer 3
E. Virtual Wire - Answer-C. Loopback
D. Layer 3
App-ID running on a firewall identifies applications using which three methods? (Choose
three.)
A. PAN-DB lookups
B. WildFire lookups
C. Application signatures
D. Program heuristics
E. Known protocol decoders - Answer-C. Application signatures
D. Program heuristics
E. Known protocol decoders
Application block pages can be enabled for which applications?
A. any
B. web-based
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Perfectscorer. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.79. You're not tied to anything after your purchase.
