لا تريد أن تفوت شيئا؟

نصائح اجتياز امتحان الشهادة

آخر أخبار الامتحانات ومعلومات الخصم

برعاية وحديثة من قبل خبرائنا

نعم، أرسل لي النشرة الإخبارية

خذ اختبارات أخرى عبر الإنترنت
السؤال #1
What is the function of a "Service" object in a Palo Alto Networks firewall configuration?
A. o define the Layer 4 protocol (TCP/UDP) and port numbers
B. o define the Layer 7 App-ID signatures
C. o set the QoS priority for specific traffic
D. o specify the URL categories to be blocked
عرض الإجابة
اجابة صحيحة: A
السؤال #2
A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone.What configuration-changes should the Firewall-admin make?
A. Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22
B. Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-address to any destination IP-address for application SSH
C. In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains source- port-TCP-22 should be created
D. In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin
عرض الإجابة
اجابة صحيحة: B
السؤال #3
Actions can be set for which two items in a URL filtering security profile? (Choose two.)
A. Block List
B. Custom URL Categories
C. PAN-DB URL Categories
D. Allow List
عرض الإجابة
اجابة صحيحة: AD
السؤال #4
The firewall sends employees an application block page when they try to access Youtube.Which Security policy rule is blocking the youtube application?
A. intrazone-default
B. Deny Google
C. allowed-security services
D. interzone-default
عرض الإجابة
اجابة صحيحة: D
السؤال #5
In Strata Cloud Manager (SCM), which logical container is used to group firewalls that share the same configuration requirements, such as those at a specific regional office?
A. Template Stacks
B. Snippets
C. Folders
D. Device Groups
عرض الإجابة
اجابة صحيحة: C
السؤال #6
When pushing a configuration from Panorama to multiple firewalls, an analyst wants to ensure that a specific local interface setting on one firewall is not overwritten by the template value. Which feature should be used?
A. Template Stack
B. Template Variable
C. Device Group Override
D. Policy Optimizer
عرض الإجابة
اجابة صحيحة: B
السؤال #7
When a company has a private list of allowed URLs for its users, what can be used to force the NGFWs to securely access the external dynamic list server using username/password?
A. Basic HTTP authentication
B. SAML
C. OpenID Connect
D. LDAP
عرض الإجابة
اجابة صحيحة: A
السؤال #8
Which administrator type utilizes predefined roles for a local administrator account?
A. Superuser
B. Role-based
C. Dynamic
D. Device administrator
عرض الإجابة
اجابة صحيحة: C
السؤال #9
Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP ­to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures.Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.
A. syslog
B. RADIUS
C. UID redistribution
D. XFF headers
عرض الإجابة
اجابة صحيحة: A
السؤال #10
Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?
A. Review Policies
B. Review Apps
C. Pre-analyze
D. Review App Matches
عرض الإجابة
اجابة صحيحة: A
السؤال #11
A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago.Which utility should the company use to identify out-of-date or unused rules on the firewall?
A. Rule Usage Filter > No App Specified
B. Rule Usage Filter >Hit Count > Unused in 30 days
C. Rule Usage Filter > Unused Apps
D. Rule Usage Filter > Hit Count > Unused in 90 days
عرض الإجابة
اجابة صحيحة: D
السؤال #12
By default, which action is assigned to the interzone-default rule?
A. Reset-client
B. Reset-server
C. Deny
D. Allow
عرض الإجابة
اجابة صحيحة: C
السؤال #13
Based on the image below, what is a risk associated with this configuration?
A. Min Version setting of TLSvl 3 can cause compatibility issues with legacy applications or clients
B. Authentication algorithm selections can significantly increase resource consumption and cause performance degradation
C. Encryption algorithms 3DES and RC4 being disabled decreases security posture
D. Max Version setting of "Max" enables the use of Perfect Forward Secrecy (PFS) and cannot be decrypted
عرض الإجابة
اجابة صحيحة: A
السؤال #14
When configuring SSL Inbound Inspection for a public-facing web server, what must be installed as a critical certificate management step to ensure decryption of the SSL connection?
A. Certificate generated by an internal CA server and session-specific certificates on the firewall
B. Self-signed certificate on the firewall to protect the identity of the server
C. Public key wildcard certificate on the firewall to decrypt all inbound traffic
D. Web server certificate and corresponding private key on the firewall
عرض الإجابة
اجابة صحيحة: D
السؤال #15
Which path is used to save and load a configuration with a Palo Alto Networks firewall?
A. Device>Setup>Services
B. Device>Setup>Management
C. Device>Setup>Operations
D. Device>Setup>Interfaces
عرض الإجابة
اجابة صحيحة: C
السؤال #16
A security administrator is creating an internet of things (IoT) Security policy and needs to select behaviors for the trafficюWhich characteristic has the greatest impact to the risk level of applications?
A. sed by Malware
B. ervasive
C. unnels Other Apps
D. nown Vulnerabilities
عرض الإجابة
اجابة صحيحة: A
السؤال #17
Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)
A. Layer-ID
B. User-ID
C. QoS-ID
D. App-ID
عرض الإجابة
اجابة صحيحة: BD
السؤال #18
Which service protects cloud-based applications such as Dropbox and Salesforce by administering permissions and scanning files for sensitive information?
A. Aperture
B. AutoFocus
C. Parisma SaaS
D. GlobalProtect
عرض الإجابة
اجابة صحيحة: C
السؤال #19
What is the best-practice approach to logging traffic that traverses the firewall?
A. Enable both log at session start and log at session end
B. Enable log at session start only
C. Enable log at session end only
D. Disable all logging options
عرض الإجابة
اجابة صحيحة: C
السؤال #20
Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)
A. User identification
B. Filtration protection
C. Vulnerability protection
D. Antivirus
E. Application identification
F. Anti-spyware
عرض الإجابة
اجابة صحيحة: ACDEF
السؤال #21
Which path is used to save and load a configuration with a Palo Alto Networks firewall?
A. Device>Setup>Services
B. Device>Setup>Management
C. Device>Setup>Operations
D. Device>Setup>Interfaces
عرض الإجابة
اجابة صحيحة: C
السؤال #22
Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?
A. Review Policies
B. Review Apps
C. Pre-analyze
D. Review App Matches
عرض الإجابة
اجابة صحيحة: A
السؤال #23
A user reports that a specific business application is dropping connection every few minutes. The analyst wants to see if the firewall's session table is reaching its limit for that specific user. Which tool should the analyst use?
A. ACC (Application Command Center)
B. Session Browser
C. Rule Usage Filter
D. Policy Optimizer
عرض الإجابة
اجابة صحيحة: B
السؤال #24
Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.
A. Exploitation
B. Installation
C. Reconnaissance
D. Act on Objective
عرض الإجابة
اجابة صحيحة: A
السؤال #25
Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)
A. Layer-ID
B. User-ID
C. QoS-ID
D. App-ID
عرض الإجابة
اجابة صحيحة: BD
السؤال #26
A security administrator is building out Decryption policies and wants to decrypt according to Palo Alto Networks best practices.Which URL categories should the administrator add to the policies?
A. Proxy avoidance and anonymizers, ransomware unknown, web-based email, web advertisements, and not resolved
B. Online storage and backup web-based email web hosting, personal sites and blogs, content delivery networks, and high-risk URL
C. AI website generator, Command and Control, compromised website, encrypted DNS, and dynamic DNS
D. Newly registered domains, internet communications and telephony, high-risk URL, insufficient content, hacking, and grayware
عرض الإجابة
اجابة صحيحة: D
السؤال #27
Which two Palo Alto Networks security management tools provide a consolidated creation of policies, centralized management and centralized threat intelligence. (Choose two.)
A. GlobalProtect
B. Panorama
C. Aperture
D. AutoFocus
عرض الإجابة
اجابة صحيحة: BD
السؤال #28
Which interface type can use virtual routers and routing protocols?
A. Tap
B. Layer3
C. Virtual Wire
D. Layer2
عرض الإجابة
اجابة صحيحة: B
السؤال #29
Which two configuration settings shown are not the default? (Choose two.)
A. Enable Security Log
B. Server Log Monitor Frequency (sec)
C. Enable Session
D. Enable Probing
عرض الإجابة
اجابة صحيحة: BC
السؤال #30
To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?
A. domain controller
B. TACACS+
C. LDAP
D. RADIUS
عرض الإجابة
اجابة صحيحة: C
السؤال #31
Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?
A. Review Policies
B. Review Apps
C. Pre-analyze
D. Review App Matches
عرض الإجابة
اجابة صحيحة: A
السؤال #32
What is the minimum timeframe that can be set on the firewall to check for new WildFire signatures?
A. every 30 minutes
B. every 5 minutes
C. once every 24 hours
D. every 1 minute
عرض الإجابة
اجابة صحيحة: D
السؤال #33
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?
A. Layer 2
B. Tap
C. Layer 3
D. Virtual Wire
عرض الإجابة
اجابة صحيحة: B
السؤال #34
An internal host wants to connect to servers of the internet through using source NAT.Which policy is required to enable source NAT on the firewall?
A. NAT policy with source zone and destination zone specified
B. post-NAT policy with external source and any destination address
C. NAT policy with no source of destination zone selected
D. pre-NAT policy with external source and any destination address
عرض الإجابة
اجابة صحيحة: A
السؤال #35
Based on the image below, what is a risk associated with this configuration?
A. in Version setting of TLSvl 3 can cause compatibility issues with legacy applications or clients
B. uthentication algorithm selections can significantly increase resource consumption and cause performance degradation
C. ncryption algorithms 3DES and RC4 being disabled decreases security posture
D. ax Version setting of "Max" enables the use of Perfect Forward Secrecy (PFS) and cannot be decrypted
عرض الإجابة
اجابة صحيحة: A
السؤال #36
An analyst is creating a "Data Pattern" for DLP that needs to match a specific 10-digit customer account number that always starts with the letters "ACC". Which pattern type should be used?
A. File Properties
B. Regular Expression (Regex)
C. Predefined Pattern
D. Custom Dictionary
عرض الإجابة
اجابة صحيحة: B
السؤال #37
A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
B. No impact because the apps were automatically downloaded and installed
C. No impact because the firewall automatically adds the rules to the App-ID interface
D. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications
عرض الإجابة
اجابة صحيحة: A
السؤال #38
A security administrator has configured App - ID updates to be automatically downloaded and installed. The company is currently using an application identified by App - ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days. Based on the information, how is the SuperApp traffic affected after the 30 days have passed?
A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp - base application
B. No impact because the apps were automatically downloaded and installed
C. No impact because the firewall automatically adds the rules to the App - ID interface
D. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications
عرض الإجابة
اجابة صحيحة: A
السؤال #39
Which data-plane processor layer of the graphic shown provides uniform matching for spyware and vulnerability exploits on a Palo Alto Networks Firewall?
A. Signature Matching
B. Network Processing
C. Security Processing
D. Security Matching
عرض الإجابة
اجابة صحيحة: A
السؤال #40
Which action ensures that sensitive information such as medical records, financial transactions, and legal communications are not decrypted and that they maintain strong security?
A. Create a log forwarding filter to exclude sensitive information
B. Disable decryption globally to avoid exposing sensitive data
C. Create an SSL Inbound Inspection policy to identify users sending sensitive information
D. Create a no-decrypt policy for traffic matching specific URL categories
عرض الإجابة
اجابة صحيحة: D
السؤال #41
Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)
A. Layer-ID
B. User-ID
C. QoS-ID
D. App-ID
عرض الإجابة
اجابة صحيحة: BD
السؤال #42
Which security profile is specifically designed to protect against "Domain Generation Algorithms" (DGA) and DNS tunneling?
A. Anti-Spyware Profile
B. URL Filtering Profile
C. DNS Security Profile
D. Vulnerability Protection Profile
عرض الإجابة
اجابة صحيحة: C
السؤال #43
Which path in PAN-OS 10.0 displays the list of port-based security policy rules?
A. Policies> Security> Rule Usage> No App Specified
B. Policies> Security> Rule Usage> Port only specified
C. Policies> Security> Rule Usage> Port-based Rules
D. Policies> Security> Rule Usage> Unused Apps
عرض الإجابة
اجابة صحيحة: A
السؤال #44
Which URL profiling action does not generate a log entry when a user attempts to access that URL?
A. Override
B. Allow
C. Block
D. Continue
عرض الإجابة
اجابة صحيحة: B
السؤال #45
Which path in PAN-OS 10.0 displays the list of port-based security policy rules?
A. Policies> Security> Rule Usage> No App Specified
B. Policies> Security> Rule Usage> Port only specified
C. Policies> Security> Rule Usage> Port-based Rules
D. Policies> Security> Rule Usage> Unused Apps
عرض الإجابة
اجابة صحيحة: A
السؤال #46
Which interface does not require a MAC or IP address?
A. Virtual Wire
B. Layer3
C. Layer2
D. Loopback
عرض الإجابة
اجابة صحيحة: A
السؤال #47
Which User-ID agent would be appropriate in a network with multiple WAN links, limited network bandwidth, and limited firewall management plane resources?
A. Windows-based agent deployed on the internal network
B. PAN-OS integrated agent deployed on the internal network
C. Citrix terminal server deployed on the internal network
D. Windows-based agent deployed on each of the WAN Links
عرض الإجابة
اجابة صحيحة: A
السؤال #48
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?
A. Translation Type
B. Interface
C. Address Type
D. IP Address
عرض الإجابة
اجابة صحيحة: A
السؤال #49
A security administrator is creating an internet of things (IoT) Security policy and needs to select behaviors for the traffic.Which characteristic has the greatest impact to the risk level of applications?
A. Used by Malware
B. Pervasive
C. Tunnels Other Apps
D. Known Vulnerabilities
عرض الإجابة
اجابة صحيحة: A

عرض الإجابات بعد التقديم

يرجى إرسال البريد الإلكتروني الخاص بك والواتس اب للحصول على إجابات الأسئلة.

ملحوظة: يرجى التأكد من صلاحية معرف البريد الإلكتروني وWhatsApp حتى تتمكن من الحصول على نتائج الاختبار الصحيحة.

بريد إلكتروني:
رقم الواتس اب/الهاتف:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.