Palo Alto Exam Questions and Answers
In an HA configuration, which two failure detection methods rely on ICMP ping? (Choose two.)
A. hellos
B. heartbeats
C. path monitoring
D. link groups - Answer-B. heartbeats
C. path monitoring
The User-ID feature is enabled per __________?
A....
Palo Alto Exam Questions
and Answers
In an HA configuration, which two failure detection methods rely on ICMP ping?
(Choose two.)
A. hellos
B. heartbeats
C. path monitoring
D. link groups - Answer-B. heartbeats
C. path monitoring
The User-ID feature is enabled per __________?
A. firewall
B. User-ID agent
C. firewall security zone
D. firewall interface - Answer-C. firewall security zone
What is a characteristic of Dynamic Admin Roles?
A. Role privileges can be dynamically updated by a firewall administrator.
B. They can be dynamically created or deleted by a firewall administrator.
C. They can be dynamically modified by external authorization systems.
D. Role privileges can be dynamically updated with newer software releases. - Answer-
D. Role privileges can be dynamically updated with newer software releases.
What is the result of performing a firewall Commit operation?
A. The loaded configuration becomes the candidate configuration.
B. The candidate configuration becomes the saved configuration.
C. The saved configuration becomes the loaded configuration.
D. The candidate configuration becomes the running configuration. - Answer-D. The
candidate configuration becomes the running configuration.
Which statement describes a function provided by an Interface Management Profile?
A. It determines the NetFlow and LLDP interface management settings.
B. It determines which external services are accessible by the firewall.
C. It determines which administrators can manage which interfaces.
D. It determines which firewall services are accessible from external devices. - Answer-
D. It determines which firewall services are accessible from external devices.
,Which statement describes the Export named configuration snapshot operation?
A. The running configuration is transferred from memory to the firewall's storage
device.
B. A copy of the configuration is uploaded to the cloud as a backup.
C. A saved configuration is transferred to an external hosts storage device.
D. The candidate configuration is transferred from memory to the firewall's storage
device. - Answer-D. The candidate configuration is transferred from memory to the
firewall's storage device.
Which three components can be sent to WildFire for analysis? (Choose three.)
A. MGT interface traffic
B. email attachments
C. files traversing the firewall
D. URL links found in email - Answer-B. email attachments
C. files traversing the firewall
D. URL links found in email
Which type of content update does NOT have to be scheduled for download on the
firewall?
A. WildFire antivirus signatures
B. PAN-DB updates
C. dynamic update antivirus signatures
D. dynamic update threat signatures - Answer-B. PAN-DB updates
Which cloud computing service model will enable an application developer to develop,
manage, and test their applications without the expense of purchasing equipment?
A. code as a service
B. software as a service
C. infrastructure as a service
D. platform as a service - Answer-D. platform as a service
Which condition must exist before a firewall's in-band interface can process traffic?
A. The firewall must not be a loopback interface.
B. The firewall must be assigned to a security zone.
C. The firewall must be enabled.
D. The firewall must be assigned an IP address. - Answer-B. The firewall must be
assigned to a security zone
Which two User-ID methods are used to verify known IP address-to-user mappings?
(Choose two.)
, A. Client Probing
B. Captive Portal
C. Server Monitoring
D. Session Monitoring - Answer-A. Client Probing
C. Server Monitoring
Which user mapping method is recommended for a highly mobile user base?
A. GlobalProtect
B. Client Probing
C. Server Monitoring
D. Session Monitoring - Answer-A. GlobalProtect
Which User-ID user mapping method is recommended for environments where users
frequently change IP addresses?
A. Client Probing
B. Captive Portal
C. Server Monitoring
D. Session Monitoring - Answer-A. Client Probing
An Antivirus Security Profile specifies Actions and WildFire Actions. Wildfire Actions
enable you to configure the firewall to perform which operation?
A. Delete packet data when a virus is suspected.
B. Download new antivirus signatures from WildFire.
C. Block traffic when a WildFire virus signature is detected.
D. Upload traffic to WildFire when a virus is suspected. - Answer-D. Upload traffic to
WildFire when a virus is suspected.
An Interface Management Profile can be attached to which two interface types?
(Choose two.)
A. Tap
B. Layer 2
C. Loopback
D. Layer 3
E. Virtual Wire - Answer-C. Loopback
D. Layer 3
App-ID running on a firewall identifies applications using which three methods? (Choose
three.)
A. PAN-DB lookups
B. WildFire lookups
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Perfectscorer. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.69. You're not tied to anything after your purchase.
