- Guías de estudio, Notas de estudios & Resúmenes

Palo Alto Test Questions with Answers In the Palo Alto Networks Application Command Center (ACC), which filter allows you to limit the display to the details you care about right now and to exclude the unrelated information from the current display? - Answer-Global What feature on the Next Generation firewall can be used to identify, in real time, the applications taking up the most bandwidth? - Answer-Application Command Center (ACC) What are the three pre-defined tabs in the Next Gener...

Palo Alto Exam Questions and Answers In an HA configuration, which two failure detection methods rely on ICMP ping? (Choose two.) A. hellos B. heartbeats C. path monitoring D. link groups - Answer-B. heartbeats C. path monitoring The User-ID feature is enabled per __________? A. firewall B. User-ID agent C. firewall security zone D. firewall interface - Answer-C. firewall security zone What is a characteristic of Dynamic Admin Roles? A. Role privileges can be dyn...

Palo Alto Exam Questions with Answers Which three engines are built into the Single Pass Parallel Processing Architecture of the Next Generation firewall? Select one or more: a. User Identification (User-ID) b. Content Identification (Content-ID) c. Threat Identification (Threat-ID) d. Application Identification (App-ID) e. Group Identification (Group-ID) - Answer-a. User Identification (User-ID) b. Content Identification (Content-ID) d. Application Identification (App-ID) Whic...

Palo Alto Final Exam Questions with Answers All Correct When creating an application filter, which of the following is true? Select one: a. They are called dynamic because they will automatically include new applications from an application signature update if the new application's type is included in the filter b. Excessive bandwidth may be used as a filter match criteria c. They are called dynamic because they automatically adapt to new IP addresses d. They are used by malwa...

Palo Alto 1-6 Test Questions with Correct Answers What should be configured as the destination zone on the original packet tab of the NAT Policy rule in the Next Generation firewall? Select one: a. Untrust-L3 b. Any c. Trust-L3 d. DMZ-L3 - Answer-Untrust-L3 Traffic going to a public IP address is being translated by a Next Generation firewall to an internal server private IP address. Which IP address should the security policy use as the destination IP in order to allow traffic to ...

Palo Alto Quizzes with Complete Solutions Graded A+ Which of the following techniques and tools are used by an attacker to hide attack communications traffic? Select one or more: (a) Port Hopping and Dynamic DNS (b) Secure Socket Layer (SSL) Encryption (c) Web Browsing (d) Process and Remote Access Tools (RATs) - Answer-Port Hopping and Dynamic DNS, Secure Socket Layer (SSL) Encryption, Process and Remote Access Tools (RATs) Business intelligence (BI) software consists of tools and ...

Palo Alto Chapter 7-12 Test with Complete Solutions What is the maximum size of .EXE files uploaded from the Next Generation firewall to WIldfire? Select one: a. Configurable up to 10 megabytes b. Always 10 megabytes c. Configurable up to 2 megabytes d. Always 2 megabytes - Answer-a. Configurable up to 10 megabytes Without a Wildfire subscription, which of the following files can be submitted by the Next Generation Firewall to the hosted Wildfire virtualized sandbox? - Answer-b. PE fi...

Palo Alto 2024 Exam with Complete Solutions How to configure DMZ traffic from outside - Answer-Create a NAT policy destined for the OUTSIDE zone - Under translated packet tab Input server ip Create policy from source to DMZ What are zone protection profiles? - Answer-- First line of defense for non-ip protocols - Create the profile and add it to zone - Network, zone profiles (left), zones, look towards bottom of pop-up How to configure a port/int for management profile - Answer--...

Palo Alto Study Test Questions with Correct Answers Which of the following are examples of an endpoint? - Answer-Desktop, Smartphone, Point of Sale Terminal Which of the following techniques is NOT used to break the command and control (CnC) phase of the Cyber Kill Chain®? - Answer-Vulnerability and Patch Management What is the name of the international cybercrime group that delivered the 2014 Sony hack and the 2017 HaoBao campaign? - Answer-Lazarus Someone with limited hacking and/or...

Palo Alto Practice Test Questions with Revised Answers Which action in a Security policy rule results in traffic being silently rejected? Select one: a. Deny b. Drop c. Reset Server d. Reset Client - Answer-Reset Server Which NGFW security policy rule applies to all matching traffic within the specified source zones? Select one: a. Default b. Interzone c. Intrazone d. Universal - Answer-Intrazone Which type of Security policy rule is the default rule type? Select one: a. Inter...