السؤال #1

An administrator is reviewing the Security policy rules shown in the screenshot below.Which statement is correct about the information displayed?

A. Eleven rules use the 'Infrastructure* tag

B. The view Rulebase as Groups is checked

C. There are seven Security policy rules on this firewall

D. Highlight Unused Rules is checked

عرض الإجابة

اجابة صحيحة: B

السؤال #2

A firewall is showing high "Packet Buffer" utilization, causing network latency. Which type of traffic is most likely to cause this issue if it is not correctly managed?

A. arge, high-throughput file transfers (Elephant Flows)

B. CMP keep-alive packets

C. anagement plane API calls

D. mall UDP DNS queries

عرض الإجابة

اجابة صحيحة: A

السؤال #3

In which stage of the Cyber-Attack Lifecycle would the attacker inject a PDF file within an email?

A. Weaponization

B. Reconnaissance

C. Installation

D. Command and Control

E. Exploitation

عرض الإجابة

اجابة صحيحة: A

السؤال #4

A company requires that all file transfers only over HTTP (tcp/80 and tcp/8080) to SaaS storage must be inspected for data exfiltration. Traffic to encrypted HTTPS SaaS storage cannot be inspected based on the company decryption restrictions.When using a security profile group, which Security policy configuration meets this requirement?

A. ne with data filtering and an application filter that matches "file-sharing" applications, then set the service to tcp/80 and tcp/8080

B. ne with URL filtering and file blocking to block all file uploads to the URL category online-storage- and-backup, then set the service to tcp/80 and tcp/8080

C. ne with data filtering and the service set to tcp/80 and tcp/8080, then verify block threshold is set to"1" to stop exfiltration

D. ne with data filtering to inspect all HTTP traffic on the web-browsing application using application- default for the service

عرض الإجابة

اجابة صحيحة: A

السؤال #5

Which file is used to save the running configuration with a Palo Alto Networks firewall?

A. running-config

B. run-config

C. running-configuration

D. run-configuratin

عرض الإجابة

اجابة صحيحة: A

السؤال #6

Which statement is true regarding a Prevention Posture Assessment?

A. The Security Policy Adoption Heatmap component filters the information by device groups, serial numbers, zones, areas of architecture, and other categories

B. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

C. It provides a percentage of adoption for each assessment area

D. It performs over 200 security checks on Panorama/firewall for the assessment

عرض الإجابة

اجابة صحيحة: B

السؤال #7

An analyst needs to configure a NAT policy to allow internal users to access the internet. The company only has one public IP address available on the firewall's outside interface. Which NAT type should be used?

A. tatic IP

B. ynamic IP

C. ynamic IP and Port (DIPP)

D. i-directional NAT

عرض الإجابة

اجابة صحيحة: C

السؤال #8

In order to attach an Antivirus, Anti-Spyware and Vulnerability Protection security profile to your Security Policy rules, which setting must be selected?

A. Policies > Security > Actions Tab > Select Group-Profiles as Profile Type

B. Policies > Security > Actions Tab > Select Default-Profiles as Profile Type

C. Policies > Security > Actions Tab > Select Profiles as Profile Type

D. Policies > Security > Actions Tab > Select Tagged-Profiles as Profile Type

عرض الإجابة

اجابة صحيحة: C

السؤال #9

An alert indicates that multiple internal endpoints are communicating with a known malicious IP address, and the analyst needs to identify the scope of this activity by using Log Viewer.What is the first step in identifying which internal hosts have communicated with the malicious IP address and determining the extent of the communication?

A. Filter the traffic logs by the known endpoint IP addresses

B. Filter the traffic logs by the DNS Server's IP address

C. Filter the traffic logs by the NGFWs IP addresses

D. Filter the traffic logs by the malicious IP address

عرض الإجابة

اجابة صحيحة: D

السؤال #10

How many zones can an interface be assigned with a Palo Alto Networks firewall?

A. two

B. three

C. four

D. one

عرض الإجابة

اجابة صحيحة: D

السؤال #11

Which administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server.Which security profile components will detect and prevent this threat after the firewall`s signature database has been updated?

A. antivirus profile applied to outbound security policies

B. data filtering profile applied to inbound security policies

C. data filtering profile applied to outbound security policies

D. vulnerability profile applied to inbound security policies

عرض الإجابة

اجابة صحيحة: C

السؤال #12

An analyst wants to allow users to visit "Social Networking" sites but prevent them from posting comments or uploading files. Which combination of Security Profile and Action is required?

A. AURL Filtering Profile set to 'Alert' for the category

B. BURL Filtering Profile using a 'URL Filtering Override

C. CURL Filtering Profile set to 'Continue' for the category

D. DURL Filtering Profile set to 'Override' for HTTP Header Insertion

عرض الإجابة

اجابة صحيحة: C

السؤال #13

Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?

A. block

B. sinkhole

C. alert

D. allow

عرض الإجابة

اجابة صحيحة: B

السؤال #14

Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

A. global

B. intrazone

C. interzone

D. universal

عرض الإجابة

اجابة صحيحة: D

السؤال #15

Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

A. Policies> Security> Rule Usage> No App Specified

B. Policies> Security> Rule Usage> Port only specified

C. Policies> Security> Rule Usage> Port-based Rules

D. Policies> Security> Rule Usage> Unused Apps

عرض الإجابة

اجابة صحيحة: A

السؤال #16

What are three differences between security policies and security profiles? (Choose three.)

A. Security policies are attached to security profiles

B. Security profiles are attached to security policies

C. Security profiles should only be used on allowed traffic

D. Security profiles are used to block traffic by themselves

E. Security policies can block or allow traffic

عرض الإجابة

اجابة صحيحة: BCE

السؤال #17

Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

A. Review Policies

B. Review Apps

C. Pre-analyze

D. Review App Matches

عرض الإجابة

اجابة صحيحة: A

السؤال #18

A security analyst is using the Strata Cloud Manager (SCM) Policy Optimizer to create specific and focused rules. The analyst accepts the new rules from Policy Optimizer and updates the rule base, but the traffic does not hit these new rules. Which action needs to be taken to resolve this issue?

A. AExecute a push configuration

B. BRemove the original Security policy rule

C. CEnable the newly created Security policy rules

D. DPerform a commit

عرض الإجابة

اجابة صحيحة: D

السؤال #19

Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

A. Active Directory monitoring

B. Windows session monitoring

C. Windows client probing

D. domain controller monitoring

عرض الإجابة

اجابة صحيحة: A

السؤال #20

Which security profile will provide the best protection against ICMP floods, based on individual combinations of a packet`s source and destination IP address?

A. DoS protection

B. URL filtering

C. packet buffering

D. anti-spyware

عرض الإجابة

اجابة صحيحة: A

السؤال #21

DNS rewrite can only be configured on a NAT rule with which type of destination address translation?

A. Dynamic IP and Port (DIPP)

B. Dynamic IP (with session distribution)

C. Static IP

D. Dynamic IP

عرض الإجابة

اجابة صحيحة: C

السؤال #22

DNS rewrite can only be configured on a NAT rule with which type of destination address translation?

A. ynamic IP and Port (DIPP)

B. ynamic IP (with session distribution)

C. tatic IP

D. ynamic IP

عرض الإجابة

اجابة صحيحة: C

السؤال #23

Which firewall plane provides configuration, logging, and reporting functions on a separate processor?

A. control

B. network processing

C. data

D. security processing

عرض الإجابة

اجابة صحيحة: A

السؤال #24

Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

A. Layer-ID

B. User-ID

C. QoS-ID

D. App-ID

عرض الإجابة

اجابة صحيحة: BD

السؤال #25

An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

A. branch office traffic

B. north-south traffic

C. perimeter traffic

D. east-west traffic

عرض الإجابة

اجابة صحيحة: D

السؤال #26

Which two security profile types can be attached to a security policy? (Choose two.)

A. antivirus

B. DDoS protection

C. threat

D. vulnerability

عرض الإجابة

اجابة صحيحة: AD

السؤال #27

How many zones can an interface be assigned with a Palo Alto Networks firewall?

A. two

B. three

C. four

D. one

عرض الإجابة

اجابة صحيحة: D

السؤال #28

A financial institution must comply with a regulation that prohibits the decryption of any traffic destined for "Banking" or "Healthcare" websites. How should the analyst implement this requirement while still decrypting other web traffic?

A. ASet the default Decryption Profile to 'No-Decrypt

B. BCreate a Decryption Policy with the action 'No Decrypt' and select the relevant URL categories

C. CAdd the banking URLs to the 'External Dynamic List

D. DUse a NAT policy to bypass the SSL engine for those categories

عرض الإجابة

اجابة صحيحة: B

السؤال #29

An analyst is troubleshooting a policy that is not matching traffic as expected. After reviewing the logs, the analyst sees that the traffic is matching a rule with a lower priority. Which feature allows the analyst to compare two rules side-by-side to identify the conflict?

A. APolicy Optimizer

B. BRule Comparison

C. CACC (Application Command Center)

D. DConfig Audit

عرض الإجابة

اجابة صحيحة: B

السؤال #30

Identify the correct order to configure the PAN-OS integrated USER-ID agent.3. add the service account to monitor the server(s)2. define the address of the servers to be monitored on the firewall4. commit the configuration, and verify agent connection status1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

A. 2-3-4-1

B. 1-4-3-2

C. 3-1-2-4

D. 1-3-2-4

عرض الإجابة

اجابة صحيحة: D

السؤال #31

Complete the statement. A security profile can block or allow traffic____________

A. on unknown-tcp or unknown-udp traffic

B. after it is matched by a security policy that allows traffic

C. before it is matched by a security policy

D. after it is matched by a security policy that allows or blocks traffic

عرض الإجابة

اجابة صحيحة: B

السؤال #32

Based on the security policy rules shown, ssh will be allowed on which port?

A. 80

B. 53

C. 22

D. 23

عرض الإجابة

اجابة صحيحة: C

السؤال #33

Which two statements are correct about App-ID content updates? (Choose two.)

A. Updated application content may change how security policy rules are enforced

B. After an application content update, new applications must be manually classified prior to use

C. Existing security policy rules are not affected by application content updates

D. After an application content update, new applications are automatically identified and classified

عرض الإجابة

اجابة صحيحة: AD

السؤال #34

What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

A. An implicit dependency does not require the dependent application to be added in the security policy

B. An implicit dependency requires the dependent application to be added in the security policy

C. An explicit dependency does not require the dependent application to be added in the security policy

D. An explicit dependency requires the dependent application to be added in the security policy

عرض الإجابة

اجابة صحيحة: AD

السؤال #35

Given the topology, which zone type should zone A and zone B to be configured with?

A. Layer3

B. Tap

C. Layer2

D. Virtual Wire

عرض الإجابة

اجابة صحيحة: A

السؤال #36

In an environment with SSL Forward Proxy decryption policies and applications that use certificate pinning, which configuration step is essential to prevent application failures due to strict certificate validation?

A. Increase the key length of the SSL Forward Proxy certificate to enhance security

B. Enable SSL/TLS 1

C. Use a wildcard certificate to bypass certificate validation issues

D. Create SSL decryption exclusions for applications that use certificate pinning

عرض الإجابة

اجابة صحيحة: D

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان