Advanced Network Security UPDATED
ACTUAL Exam Questions and CORRECT
Answers
Which four models are the Palo Alto Networks next-generation firewall models? - CORRECT
ANSWER - PA-200 Series
PA-3200 Series
PA-5000 Series
PA-7000 Series
Which two planes are found in Palo Alto Networks single-pass platform architecture? -
CORRECT ANSWER - Control
Data
True of False? The strength of the Palo Alto Networks firewall is its Single-Pass Parallel
Processing (SP3) engine . - CORRECT ANSWER - True
Which new firewall model was introduced with PAN-OS 8.1 with double the data-plane
memory? - CORRECT ANSWER - PA-5280
Palo Alto Networks firewalls are built with a dedicated out-of-band management port that has
which three attributes. - CORRECT ANSWER - Labeled MGT by default.
Passes only management traffic for the device and cannot be configured as a standard traffic
port.
Administrators use the out-of-band management port for the direct connectivity to the
management plane of the firewall.
Which three statements are true regarding the candidate configuration? - CORRECT
ANSWER - You can revert the candidate configuration to the running configuration.
Clicking save creates a copy of the current candidate configuration.
, Choosing commit updates the running configuration with the contents of the candidate
configuration.
True or False? Firewall administrator accounts can be individualized for user needs, granting, or
restricting permissions as appropriate? - CORRECT ANSWER - True
Firewall administration can be done using which four interfaces? - CORRECT ANSWER -
Web interface
Panorama
Command line interface
XML API
True or False? Service routes can be used to configure an in-band port to access external
services. - CORRECT ANSWER - True
Which four items are possible network traffic match criteria in a Security policy on a Palo Alto
Networks firewall? - CORRECT ANSWER - Source Zone
Username
URL
Application
Which of the three types of Security policy rules that can be created is the default rule type? -
CORRECT ANSWER - Universal
True or False? The intrazone-default and interzone-default rules cannot be modified. -
CORRECT ANSWER - False
Which three items are names of valid source NAT translation types - CORRECT
ANSWER - Dynamic IP
Dynamic IP/Port
ACTUAL Exam Questions and CORRECT
Answers
Which four models are the Palo Alto Networks next-generation firewall models? - CORRECT
ANSWER - PA-200 Series
PA-3200 Series
PA-5000 Series
PA-7000 Series
Which two planes are found in Palo Alto Networks single-pass platform architecture? -
CORRECT ANSWER - Control
Data
True of False? The strength of the Palo Alto Networks firewall is its Single-Pass Parallel
Processing (SP3) engine . - CORRECT ANSWER - True
Which new firewall model was introduced with PAN-OS 8.1 with double the data-plane
memory? - CORRECT ANSWER - PA-5280
Palo Alto Networks firewalls are built with a dedicated out-of-band management port that has
which three attributes. - CORRECT ANSWER - Labeled MGT by default.
Passes only management traffic for the device and cannot be configured as a standard traffic
port.
Administrators use the out-of-band management port for the direct connectivity to the
management plane of the firewall.
Which three statements are true regarding the candidate configuration? - CORRECT
ANSWER - You can revert the candidate configuration to the running configuration.
Clicking save creates a copy of the current candidate configuration.
, Choosing commit updates the running configuration with the contents of the candidate
configuration.
True or False? Firewall administrator accounts can be individualized for user needs, granting, or
restricting permissions as appropriate? - CORRECT ANSWER - True
Firewall administration can be done using which four interfaces? - CORRECT ANSWER -
Web interface
Panorama
Command line interface
XML API
True or False? Service routes can be used to configure an in-band port to access external
services. - CORRECT ANSWER - True
Which four items are possible network traffic match criteria in a Security policy on a Palo Alto
Networks firewall? - CORRECT ANSWER - Source Zone
Username
URL
Application
Which of the three types of Security policy rules that can be created is the default rule type? -
CORRECT ANSWER - Universal
True or False? The intrazone-default and interzone-default rules cannot be modified. -
CORRECT ANSWER - False
Which three items are names of valid source NAT translation types - CORRECT
ANSWER - Dynamic IP
Dynamic IP/Port
