Palo alto Study guides, Class notes & Summaries

1. Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic? A. check B. find C. test D. sim - C. test An organization has Palo Alto Networks NGFWs that send logs to remote monitoring and security management platforms. The network team has reported excessive traffic on the corporate WAN. How could the Palo Alto Networks NGFW administrator reduce WAN traff...

Palo Alto Test 3 Questions with Answers Which four items are possible network traffic match criteria in a Security policy on a Palo Alto Networks firewall? (Choose four.) A. Source Zone B. Username C. DNS Domain D. URL E. Application - Answer-A. Source Zone B. Username D. URL E. Application Which of the three types of Security policy rules that can be created is the default rule type? A. intrazone B. interzone C. universal - Answer-C. universal The intrazone-default and inte...

Palo Alto 2024 Exam Questions with Revised Answers What does "Load configuration version" do? - Answer-Restore a previous version of the running configuration that is stored on the firewall. The firewall creates a version whenever you commit configuration changes. What does "Import named configuration snapshot" do? - Answer-Restore a running or candidate configuration that you previously exported to an external host. What does "Import device state" do? - Answer-Restore state inf...

Palo Alto Exam Questions and Answers In an HA configuration, which two failure detection methods rely on ICMP ping? (Choose two.) A. hellos B. heartbeats C. path monitoring D. link groups - Answer-B. heartbeats C. path monitoring The User-ID feature is enabled per __________? A. firewall B. User-ID agent C. firewall security zone D. firewall interface - Answer-C. firewall security zone What is a characteristic of Dynamic Admin Roles? A. Role privileges can be dyn...

Palo Alto Practice Test Questions with Revised Answers Which action in a Security policy rule results in traffic being silently rejected? Select one: a. Deny b. Drop c. Reset Server d. Reset Client - Answer-Reset Server Which NGFW security policy rule applies to all matching traffic within the specified source zones? Select one: a. Default b. Interzone c. Intrazone d. Universal - Answer-Intrazone Which type of Security policy rule is the default rule type? Select one: a. Inter...

Palo Alto PCCET Exam Questions with Answers What does the acronym CIDR represent? Classful Inter Dependant Routing Classless Inter-Domain Routing Classless Inter Dependant Routing Classful Inter Domain Routing - Answer-Classless Inter-Domain Routing Palo Alto Networks firewalls are built on which type of architecture? Multi-pass Ultimate-pass Single-pass Strict-pass - Answer-Single-pass Which physical or virtual device sends data packets to destination networks along a networ...

Palo Alto Final Exam Questions with Answers All Correct When creating an application filter, which of the following is true? Select one: a. They are called dynamic because they will automatically include new applications from an application signature update if the new application's type is included in the filter b. Excessive bandwidth may be used as a filter match criteria c. They are called dynamic because they automatically adapt to new IP addresses d. They are used by malwa...

Palo Alto 2024 Exam with Complete Solutions How to configure DMZ traffic from outside - Answer-Create a NAT policy destined for the OUTSIDE zone - Under translated packet tab Input server ip Create policy from source to DMZ What are zone protection profiles? - Answer-- First line of defense for non-ip protocols - Create the profile and add it to zone - Network, zone profiles (left), zones, look towards bottom of pop-up How to configure a port/int for management profile - Answer--...

Palo Alto All Questions and Answers with complete solution

Palo Alto 2024 Exam Questions with Answers All Correct What are the four major technologies Palo Alto Networks App-ID uses to help identify applications? Select one or more: a. Content-ID Signature Match b. Unknown protocol decoder c. Known protocol decoders d. Application signatures e. Protocol decryption - Answer-b. Unknown protocol decoder c. Known protocol decoders d. Application signatures e. Protocol decryption What Palo Alto Networks technology makes it difficult for evas...

Palo Alto PCNSA Test Questions and Answers Which command backs up configuration files to a remote network device? A. import B. load C. copy D. export - Answer-D. export The command load named configuration snapshot overwrites the current candidate configuration with which three items? (Choose three.) A. custom‐named candidate configuration snapshot (instead of the default snapshot) B. custom‐named running configuration that you imported C. D. current running configuration (run...