Study guides, Class notes & Summaries

Flexible Deployment Options - Basic Deployment - Direct Log Collection Distributed Deployment - Log collection is directed to dedicated Panorama management List the different Hardware Devices - M-600 (lg. scale FW) M-500 (data center) M-200 (Large scale deployments) M-100 (legacy hardware) 1. A panorama virtual appliance in the cloud can manage only firewalls in the cloud. A. True B. False - A. True 2. To register a Panorama physical appliance in the Customer Support Portal, you need th...

AutoFocus - The AutoFocus threat intelligence service enables security teams to prioritize their response to unique, targeted attacks and gain the intelligence, analytics and context needed to protect your organization. It provides context around an attack spotted in your traffic and threat logs, such as the malware family, campaign, or malicious actor targeting your organization. AutoFocus correlates and gains intelligence from: o WildFire® service - the industry's largest threat analysi...

How many firewalls warrant the use of Panorama - 6 A PA's default MGT IP is - 192.168.1.1 Disable ________ and _________ on the MGT interface - Telnet and HTTP Palo Alto recommends not giving the ____ port _______ access, instead: give ______ access to a _______ port - MGT, external, external, data ___________ ________________ are how a PA accesses updates, etc., they can be customized per vsys - Service routes How do you configure service routes - Device > setup > services > gl...

What is the last step of packet processing in the firewall? check allowed ports check Security Profiles check Security policy forwarding lookup - Check Security Profiles Which interface type requires you to configure where the next hop is for various addresses? tap virtual wire Layer 2 Layer 3 - Layer 3 How do you enable the firewall to be managed through a data-plane interface? You specify Web UI in the interface properties. You specify Management in the interface properties.

2 ways to Reset to Factory default - * from CLI with known password . request system private-data-reset * from CLI without PW reboot and type "maint" during bootup choose Reset to factory default or load another config into running memory DNS and NTP are configured where? - Device > Setup > Services where do you configure service routes - device > setup > services > service route configuration name of the running config - where do you manage configurations - device &g...

Which component of the integrated Palo Alto Networks security solution limits network- attached workstation access to a corporate mainframe? threat intelligence cloud advanced endpoint protection next-generation firewall tunnel inspection - C - NGFW Which Palo Alto Networks product is designed primarily to provide threat context with deeper information about attacks? RedLock WildFire AutoFocus Threat Prevention - C - AutoFocus Which Palo Alto Networks product is designed primarily to...

1.1 Identify how Palo Alto Networks products work together to improve PAN-OS services - Security Operations PA cybersecurity portfolio is organized into 3 offerings. What are they? - 1- strata for enterprise security 2- prisma for cloud security 3- cortex for security operations What functions does strata provide? - Strata prevents attacks with the industry-leading network security suite that enables organizations to embrace network transformation while consistently security users applic...

1. Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic? A. check B. find C. test D. sim - C. test An organization has Palo Alto Networks NGFWs that send logs to remote monitoring and security management platforms. The network team has reported excessive traffic on the corporate WAN. How could the Palo Alto Networks NGFW administrator reduce WAN traff...

security zone - group networks that contain particular types of traffic that are contained within defined security classifications Intrazone traffic - allows traffic to flow between interfaces that exist in the same zone Interzone traffic - denies traffic from flowing between interfaces that exist in different zones Security policy rules - are applied to zones (not interfaces) to allow or deny traffic, apply QoS, perform NAT, apply security profiles, or set logging parameters. primary zone...

What does SP3 stand for? - Single-Pass Parallel Processing architecture. What is the difference between the PA-5260 and the PA-5280? - Double the data-plane RAM which doubles the session capacity. (Can't find a non-training source for this.) When is a Virtual Systems license needed? - • To support multiple virtual systems on PA-3200 Series firewalls. • To create more than the base number of virtual systems supported on a platform. overview/ What is the default IP address for a phy...