1
Palo Alto Questions with Answers (100% Correct
Answers)
Which built-in administrator role allows all rights except for the
creation of administrative accounts and virtual systems?
a. superuser
b. custom role
c. deviceadmin
d. vsysadmin— Answer: c. deviceadmin****
which built in role on the next generation firewall is the same as
superuser except for creation of administrative accounts?
a. deviceadmin
b. vsysadmin
c. sysadmin
d. devicereader— Answer: a. deviceadmin****
© 2025 All rights reserved
,2
Which Next Generation Firewall feature protects cloud-based
applications such as Box, Salesforce, and Dropbox by managing
permissions and scanning files for external exposure and sensitive
information.
a. Aperture
b. GlobalProtect
c. Panorama
d. AutoFocus— Answer: a. Aperture****
On the Next Generation firewall, what type of security profile detects
infected files being transferred with the application?
a. Vulnerability Protection
b. WildFire Analysis
c. Anti-Virus
d. URL Filtering
e. File Blocking— Answer: c. Anti-Virus****
© 2025 All rights reserved
, 3
On the Next Generation firewall, DNS sinkhole allows administrators
to quickly identify infected hosts on the network using DNS traffic.
True
False— Answer: True
In the latest Next Generation firewall version, what is the shortest time
that can be configured on the firewall to check for Wildfire updates?
Select one:
a. 30 Minutes
b. 15 Minutes
c. 1 Hour
d. 5 Minutes— Answer: d. 5 Minutes ****
Without a Wildfire subscription, which of the following files can be
submitted by the Next Generation FIrewall to the hosted Wildfire
virtualized sandbox?
Select one:
© 2025 All rights reserved
Palo Alto Questions with Answers (100% Correct
Answers)
Which built-in administrator role allows all rights except for the
creation of administrative accounts and virtual systems?
a. superuser
b. custom role
c. deviceadmin
d. vsysadmin— Answer: c. deviceadmin****
which built in role on the next generation firewall is the same as
superuser except for creation of administrative accounts?
a. deviceadmin
b. vsysadmin
c. sysadmin
d. devicereader— Answer: a. deviceadmin****
© 2025 All rights reserved
,2
Which Next Generation Firewall feature protects cloud-based
applications such as Box, Salesforce, and Dropbox by managing
permissions and scanning files for external exposure and sensitive
information.
a. Aperture
b. GlobalProtect
c. Panorama
d. AutoFocus— Answer: a. Aperture****
On the Next Generation firewall, what type of security profile detects
infected files being transferred with the application?
a. Vulnerability Protection
b. WildFire Analysis
c. Anti-Virus
d. URL Filtering
e. File Blocking— Answer: c. Anti-Virus****
© 2025 All rights reserved
, 3
On the Next Generation firewall, DNS sinkhole allows administrators
to quickly identify infected hosts on the network using DNS traffic.
True
False— Answer: True
In the latest Next Generation firewall version, what is the shortest time
that can be configured on the firewall to check for Wildfire updates?
Select one:
a. 30 Minutes
b. 15 Minutes
c. 1 Hour
d. 5 Minutes— Answer: d. 5 Minutes ****
Without a Wildfire subscription, which of the following files can be
submitted by the Next Generation FIrewall to the hosted Wildfire
virtualized sandbox?
Select one:
© 2025 All rights reserved
