- All Exams Instant Download
What is the right path m order to configure the new firewall Administrator Profile?
The Net Sec Manager asked to create a new Firewall Operator profile with customized privileges. In particular, the new firewall operator should be able to: Check the configuration with read-only privilege for LDAP, RADIUS, TACACS+, and SAML as Server profiles to be used inside an Authentication profile. The firewall operator...
Which Policy Optimizer feature is shown in the screenshot below?
An administrator is updating Security policy to align with best practices. Which Policy Optimizer feature is shown in the screenshot below?A . Rules without App Controls B. New App Viewer C. Rule Usage -Unused D. Unused AppsView AnswerAnswer: A Explanation: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/app-id/security-policy-rule-optimization/migrate-port-based-to-app-id-based-security-policy-rules
Where within the firewall GUI can all existing tags be viewed?
Where within the firewall GUI can all existing tags be viewed?A . Policies > Tags B. Network > Tags C. Objects > Tags D. Monitor > TagsView AnswerAnswer: C
Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?
Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?A . global B. intrazone C. interzone D. universalView AnswerAnswer: C Explanation: intrazone allows traffic within a zone not between different zones.
What are the two types of Administrator accounts? (Choose two.)
What are the two types of Administrator accounts? (Choose two.)A . Role Based B. Superuser C. Dynamic D. LocalView AnswerAnswer: AC Explanation: https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/firewall-administration/manage-firewall-administrators/configure-administrative-accounts-and-authentication/configure-a-firewall-administrator-account
member of?
When an ethernet interface is configured with an IPv4 address, which type of zone is it a member of?A . Layer 3 B. Virtual Wire C. Tap D. TunnelView AnswerAnswer: A
Which firewall feature do you need to configure to query Palo Alto Networks service updates over a data-plane interface instead of the management interface?
Which firewall feature do you need to configure to query Palo Alto Networks service updates over a data-plane interface instead of the management interface?A . service route B. dynamic updates C. SNMP setup D. data redistributionView AnswerAnswer: A
Based on the graphic, which statement accurately describes the output shown in the Server Monitoring panel?
Based on the graphic, which statement accurately describes the output shown in the Server Monitoring panel? A . The User-ID agent is connected to a domain controller labeled lab-client. B. The host lab-client has been found by the User-ID agent. C. The host lab-client has been found by a domain...
If a virus gets detected, how will the firewall handle the traffic?
An administrator configured a Security policy rule with an Antivirus Security profile. The administrator did not change the action for the profile. If a virus gets detected, how will the firewall handle the traffic?A . It allows the traffic but generates an entry in the Threat logs. B. It drops...
What is an advantage for using application tags?
What is an advantage for using application tags?A . They are helpful during the creation of new zones B. They help with the design of IP address allocations in DHCP. C. They help content updates automate policy updates D. They help with the creation of interfacesView AnswerAnswer: C Explanation: Tags....
