Palo alto test - Study guides, Class notes & Summaries

1. Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic? A. check B. find C. test D. sim - C. test An organization has Palo Alto Networks NGFWs that send logs to remote monitoring and security management platforms. The network team has reported excessive traffic on the corporate WAN. How could the Palo Alto Networks NGFW administrator reduce WAN traff...

Palo Alto Test 3 Questions with Answers Which four items are possible network traffic match criteria in a Security policy on a Palo Alto Networks firewall? (Choose four.) A. Source Zone B. Username C. DNS Domain D. URL E. Application - Answer-A. Source Zone B. Username D. URL E. Application Which of the three types of Security policy rules that can be created is the default rule type? A. intrazone B. interzone C. universal - Answer-C. universal The intrazone-default and inte...

Palo Alto Test Questions with Correct Answers Which Next Generation VM Series Model requires a minimum of 16 GB of memory and 60 GB of dedicated disk drive capacity? Select one: a. VM-700 b. VM-500 c. VM-100 d. VM-50 - Answer-b. VM-500 Which three engines are built into the Single Pass Parallel Processing Architecture of the Next Generation firewall? Select one or more: a. User Identification (User-ID) b. Content Identification (Content-ID) c. Threat Identification (Threat-ID) d...

Palo Alto Test Questions and Answers All Correct What three basic requirements are necessary to create a VPN in the Next Generation firewall? - Answer-Configure the IPSec tunnel, Add a static route, Create the tunnel interface True or False. In the Palo Alto Networks GlobalProtect connection sequence, there is direct communication among gateways or between gateways and portals. - Answer-False Virtual Private Networks (VPNs) allow systems to connect securely over public networks as if th...

Palo Alto Test Questions with Answers In the Palo Alto Networks Application Command Center (ACC), which filter allows you to limit the display to the details you care about right now and to exclude the unrelated information from the current display? - Answer-Global What feature on the Next Generation firewall can be used to identify, in real time, the applications taking up the most bandwidth? - Answer-Application Command Center (ACC) What are the three pre-defined tabs in the Next Gener...

Palo Alto Test 2 Questions and Answers On the Palo Alto Networks Next Generation Firewall, which is the default port for transporting Syslog traffic? - Answer-6514 What is the prerequisite for configuring a pair of Next Generation firewalls in an Active/Passive High Availability (HA) pair? - Answer-The firewalls must have the same set of licenses The firewalls in an HA pair can be assigned a Device Priority value to indicate a preference for which firewall should assume the active role. ...

C - In which cloud computing service model does a provider's applications run on a cloud infrastructure and the consumer does not manage or control the underlying infrastructure? A. Platform as a Service (PaaS) B. Infrastructure as a Service (IaaS) C. Software as a Service (SaaS) D. Public Cloud T - Business intelligence (BI) software consists of tools and techniques used to surface large amounts of raw unstructured data to perform a variety of tasks including data mining, event processi...

Which role in the Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations ensures that an effective program is established and implemented for the organization by establishing expectations and requirements for the organizations's ISCM program; working closely with authorizing officials to provide funding, personnel, and other resources to support ISCM; and maintaining high-level communications and working group relationships among organizational e...

Palo Alto PCNSA Test Questions and Answers Which command backs up configuration files to a remote network device? A. import B. load C. copy D. export - Answer-D. export The command load named configuration snapshot overwrites the current candidate configuration with which three items? (Choose three.) A. custom‐named candidate configuration snapshot (instead of the default snapshot) B. custom‐named running configuration that you imported C. D. current running configuration (run...

C - In which cloud computing service model does a provider's applications run on a cloud infrastructure and the consumer does not manage or control the underlying infrastructure? A. Platform as a Service (PaaS) B. Infrastructure as a Service (IaaS) C. Software as a Service (SaaS) D. Public Cloud T - Business intelligence (BI) software consists of tools and techniques used to surface large amounts of raw unstructured data to perform a variety of tasks including data mining, event processi...

Palo Alto Practice Test Questions with Revised Answers Which action in a Security policy rule results in traffic being silently rejected? Select one: a. Deny b. Drop c. Reset Server d. Reset Client - Answer-Reset Server Which NGFW security policy rule applies to all matching traffic within the specified source zones? Select one: a. Default b. Interzone c. Intrazone d. Universal - Answer-Intrazone Which type of Security policy rule is the default rule type? Select one: a. Inter...