Given the detailed log information above, what was the result of the firewall traffic inspection?
Which two features can be used to tag a user name so that it is included in a dynamic user group? (Choose two)
What allows a security administrator to preview the Security policy rules that match new application signatures?
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?
An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.
Why doesn't the administrator see the traffic?
An organization has some applications that are restricted for access by the Human Resources Department only, and other applications that are available for any known user in the organization.
What object is best suited for this configuration?
Which two settings allow you to restrict access to the management interface? (Choose two )
Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?
Based on the screenshot presented which column contains the link that when clicked opens a window to display all applications matched to the policy rule?
How many zones can an interface be assigned with a Palo Alto Networks firewall?
Place the following steps in the packet processing order of operations from first to last.
Which three statement describe the operation of Security Policy rules or Security Profiles? (Choose three)
A systems administrator momentarily loses track of which is the test environment firewall and which is the production firewall. The administrator makes changes to the candidate configuration of the production firewall, but does not commit the changes. In addition, the configuration was not saved prior to
making the changes.
Which action will allow the administrator to undo the changes?
Which type of profile must be applied to the Security policy rule to protect against buffer overflows illegal code execution and other attempts to exploit system flaws?
Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?
Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three )
An address object of type IP Wildcard Mask can be referenced in which part of the configuration?
According to the best practices for mission critical devices, what is the recommended interval for antivirus updates?
Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)
Which two types of profiles are needed to create an authentication sequence? (Choose two.)
Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping.
What is the quickest way to reset the hit counter to zero in all the security policy rules?
What are three Palo Alto Networks best practices when implementing the DNS Security Service? (Choose three.)
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?
What does an administrator use to validate whether a session is matching an expected NAT policy?
Arrange the correct order that the URL classifications are processed within the system.
How would a Security policy need to be written to allow outbound traffic using Secure Shell (SSH) to destination ports tcp/22 and tcp/4422?
Review the Screenshot:
Given the network diagram, traffic must be permitted for SSH and MYSQL from the DMZ to the SERVER zones, crossing two firewalls. In addition, traffic should be permitted from the
SERVER zone to the DMZ on SSH only.
Which rule group enables the required traffic?
A)
B)
C)
D)
During the packet flow process, which two processes are performed in application identification? (Choose two.)
Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?
An administrator would like to silently drop traffic from the internet to a ftp server.
Which Security policy action should the administrator select?
Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by inspecting traffic deployed as internet gateways?
In which three places on the PAN-OS interface can the application characteristics be found? (Choose three.)
Which plane on a Palo alto networks firewall provides configuration logging and reporting functions on a separate processor?
What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)
What is a prerequisite before enabling an administrative account which relies on a local firewall user database?
In the PAN-OS Web Interface, which is a session distribution method offered under NAT Translated Packet Tab to choose how the firewall assigns sessions?
For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?
You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common application
Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?
What two authentication methods on the Palo Alto Networks firewalls support authentication and authorization for role-based access control? (Choose two.)
Where does a user assign a tag group to a policy rule in the policy creation window?
A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?
Which two features implement one-to-one translation of a source IP address while allowing the source port to change? (Choose two.)
What must be considered with regards to content updates deployed from Panorama?
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)
An administrator is investigating a log entry for a session that is allowed and has the end reason of aged-out. Which two fields could help in determining if this is normal? (Choose two.)
Users from the internal zone need to be allowed to Telnet into a server in the DMZ zone.
Complete the security policy to ensure only Telnet is allowed.
Security Policy: Source Zone: Internal to DMZ Zone __________services “Application defaults”, and action = Allow
An administrator should filter NGFW traffic logs by which attribute column to determine if the entry is for the start or end of the session?
Assume that traffic matches a Security policy rule but the attached Security Profiles is configured to block matching traffic
Which statement accurately describes how the firewall will apply an action to matching traffic?
An administrator needs to create a Security policy rule that matches DNS traffic within the LAN zone, and also needs to match DNS traffic within the DMZ zone The administrator does not want to allow traffic between the DMZ and LAN zones.
Which Security policy rule type should they use?
Your company occupies one floor in a single building you have two active directory domain controllers on a single networks the firewall s management plane is only slightly utilized.
Which user-ID agent sufficient in your network?
At which point in the app-ID update process can you determine if an existing policy rule is affected by an app-ID update?
An administrator configured a Security policy rule where the matching condition includes a single application and the action is set to deny. What deny action will the firewall perform?
Files are sent to the WildFire cloud service via the WildFire Analysis Profile. How are these files used?
What must first be created on the firewall for SAML authentication to be configured?
Which type of security policy rule will match traffic that flows between the Outside zone and inside zone, but would not match traffic that flows within the zones?
During the App-ID update process, what should you click on to confirm whether an existing policy rule is affected by an App-ID update?
Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?
Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?
You need to allow users to access the office–suite application of their choice. How should you configure the firewall to allow access to any office-suite application?
Which two actions are needed for an administrator to get real-time WildFire signatures? (Choose two.)
An administrator is implementing an exception to an external dynamic list by adding an entry to the list manually. The administrator wants to save the changes, but the OK button is grayed out.
What are two possible reasons the OK button is grayed out? (Choose two.)
Which object would an administrator create to block access to all high-risk applications?
Which action can be set in a URL Filtering Security profile to provide users temporary access to all websites in a given category using a provided password?
Which administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server.
Which security profile components will detect and prevent this threat after the firewall`s signature database has been updated?
Based on the image provided, which two statements apply to the Security policy rules? (Choose two.)
Which data flow direction is protected in a zero trust firewall deployment that is not protected in a perimeter-only firewall deployment?
Which feature enables an administrator to review the Security policy rule base for unused rules?
Identify the correct order to configure the PAN-OS integrated USER-ID agent.
3. add the service account to monitor the server(s)
2. define the address of the servers to be monitored on the firewall
4. commit the configuration, and verify agent connection status
1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent
Which feature enables an administrator to review the Security policy rule base for unused rules?
Which path in PAN-OS 10.0 displays the list of port-based security policy rules?
Why should a company have a File Blocking profile that is attached to a Security policy?
Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?
How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?
Which stage of the cyber-attack lifecycle makes it important to provide ongoing education to users on spear phishing links, unknown emails, and risky websites?
Which URL Filtering profile action would you set to allow users the option to access a site only if they provide a URL admin password?
What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?
Which User-ID agent would be appropriate in a network with multiple WAN links, limited network bandwidth, and limited firewall management plane resources?
DumpsMate's team of experts is always available to respond your queries on exam preparation. Get professional answers on any topic of the certification syllabus. Our experts will thoroughly satisfy you.
TESTED 25 Oct 2024
