Guías de estudio, Notas de estudios & Resúmenes

When offloading traffic from the NGFW using Arista MSS, a 5 tuple is used and what actions are available? (Select all that apply) A. Permit B. Deny C. Block D. Allow E. Reset - Answer- A, B How does Arista MSS decide what traffic should be sent to the NGFW for inspection? A. Defined in CloudVision console B. Interesting rules pulled from Panorama C. Traffic is inline using vWire between leaf switches - Answer- B Using which two metrics gathered by Celiometer, OpenStack deploys or ...

True or False. The Lockheed Martin Cyber Kill Chain® framework is a five-step process that an attacker goes through in order to attack a network. - Answer- False, it is 7-steps What would be the best description of 'polymorphism and metamorphism' ? Hiding techniques, Encrypting algorithm, SPIM, SPAM - Answer- Hiding techniques The terms 'ingress/egress' best match the following descriptions: Ingoing/outgoing, detection/prevention, trusted/untrusted, patching/updating - Answer- Ingoi...

An Antivirus Security Profile specifies Actions and WildFire Actions. Wildfire Actions enable you to configure the firewall to perform which operation? A. Delete packet data when a virus is suspected. B. Download new antivirus signatures from WildFire. C. Block traffic when a WildFire virus signature is detected. D. Upload traffic to WildFire when a virus is suspected. - Answer- D. Upload traffic to WildFire when a virus is suspected. An Interface Management Profile can be attached ...

Which built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems? a. superuser b. custom role c. deviceadmin d. vsysadmin - Answer- deviceadmin Which Next Generation VM Series Model requires a minimum of 16 GB of memory and 60 GB of dedicated disk drive capacity? Select one: a. VM-700 b. VM-500 c. VM-100 d. VM-50 - Answer- VM-500 On the Next Generation firewall, a commit lock blocks other administrators from committing cha...

Which feature can be configured to block sessions that the firewall cannot decrypt? - Answer- Decryption profile in decryption policy What is default setting for "Action" in a decryption policy rule? - Answer- No-decrypt Which type of Next Generation Firewall decryption inspects SSL traffic between an internal host and an external web server? - Answer- SSL Forward Proxy When SSL encrypted traffic first arrives at the Next Generation Firewall, which technology initially identifies the ...

Which feature can be configured to block sessions that the firewall cannot decrypt? Select one: a. Decryption profile in security policy b. Decryption profile in decryption policy c. Decryption profile in security profile d. Decryption profile in PBF - Answer- Decryption profile in decryption policy What is default setting for "Action" in a decryption policy rule? Select one: a. Any b. None c. No-decrypt d. Decrypt - Answer- c. No-decrypt Which type of Next Generation Firewall ...

Which role is associated with responsibility for backups and disaster-recovery configuration? A. SOAR engineer B. IT administrator C. SOC/CERT analyst D. SOC/CERT manager - Answer- B What are the three key feature sets of the Cortex XSOAR platform? (Choose three.) A. collaboration environment B. workflow automation C. security ticketing D. integrated development environment - Answer- ABC What is a primary focus of the role of an IT administrator? A. configure and enable all anti...

After the Digital Transformation, where are apps located? A. in Data Centers B. Anywhere C. In the Cloud D. On Mobile Devices - Answer- B. Anywhere What has increased as a result of the acceleration of the shift to a mobile workforce due to Covid-19? A. use of home-computer security B. load on data-center networks C. use of private-cloud infrastructures D. use of cloud services - Answer- D. use of cloud services Solutions that provide security for web-based applications have wh...

Which built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems? Select one: a. Custom role b. deviceadmin c. superuser d. vsysadmin - Answer- b. deviceadmin Which of the following processes are performed on the Data Plane? (Choose 3) Select one or more: a. Security Processing b. Signature Matching c. Network Processing d. Log and Report Processing - Answer- a. Security Processing b. Signature Matching c. Network Processin...

1. Which four models are the Palo Alto Networks next-generation firewall models? (Choose four.) a. PA-200 Series b. PA-2000 Series c. PA-300 Series d. PA-3200 Series e. PA-400 Series f. PA-5000 Series g. PA-7000 Series - Answer- a. PA-200 Series d. PA-3200 Series f. PA-5000 Series g. PA-7000 Series 2. Which two planes are found in Palo Alto Networks single-pass platform architecture? (Choose two.) a. control b. single pass c. data d. parallel processing - Answer- a...