- All Exams Instant Download
How would an administrator configure the interface to 1Gbps?
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects. How would an administrator configure the interface to 1Gbps?A . set deviceconfig interface speed-duplex 1Gbps-full-duplexB . set deviceconfig system speed-duplex 1Gbps-duplexC . set deviceconfig system speed-duplex 1Gbps-full-duplexD . set deviceconfig Interface...
Which two configuration options can be used to correctly categorize their custom database application?
A customer has an application that is being identified as unknown-top for one of their custom PostgreSQL database connections. Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)A . Application Override policy.B . Security policy to identify the custom application.C . Custom application.D...
When configuring the firewall for packet capture, what are the valid stage types?
When configuring the firewall for packet capture, what are the valid stage types?A . Receive, management, transmit, and dropB . Receive, firewall, send, and non-synC . Receive management, transmit, and non-synD . Receive, firewall, transmit, and dropView AnswerAnswer: D
How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?
A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?A . Define a...
Which virtual router feature determines if a specific destination IP address is reachable?
Which virtual router feature determines if a specific destination IP address is reachable?A . Heartbeat MonitoringB . FailoverC . Path MonitoringD . Ping-PathView AnswerAnswer: C Explanation: Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/pbf
What must the administrator configure so that the PAN-OS® software can be upgraded?
An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OS® software. The firewall has internet connectivity through an Ethernet interface, but no internet connectivity from the management interface. The Security policy has the default security rules and a rule that allows all web-browsing...
Which one is the correct configuration?
To more easily reuse templates and template slacks, you can create term plate variables in place of firewall-specific and appliance-specific IP literals in your configurations Which one is the correct configuration?A . @PanoramaB . #PancramaC . &PanoramaD . $PanoramaView AnswerAnswer: D
Which Security Profile type will prevent this attack?
An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an internal system. Which Security Profile type will prevent this attack?A . Vulnerability ProtectionB . Anti-SpywareC . URL FilteringD . AntivirusView AnswerAnswer:...
Which three options are supported in HA Lite? (Choose three.)
Which three options are supported in HA Lite? (Choose three.)A . Virtual linkB . Active/passive deploymentC . Synchronization of IPsec security associationsD . Configuration synchronizationE . Session synchronizationView AnswerAnswer: B,C,D Explanation: “The PA-200 firewall supports HA Lite only. HA Lite is an active/passive deployment that provides configuration synchronization and some...
What must be configured to enable the firewall to download the current version of PAN-OS software?
An administrator needs to upgrade an NGFW to the most current version of PAN-OS® software. The following is occurring: • Firewall has Internet connectivity through e1/1. • Default security rules and security rules allowing all SSL and web-browsing traffic to and from any zone. • Service route is configured, sourcing...
