- All Exams Instant Download
Which component scans for threats in allowed traffic?
Which component scans for threats in allowed traffic?A . Intelligent Traffic OffloadB . TLS decryptionC . Security profilesD . NATView AnswerAnswer: C Explanation: Security profiles are the components that scan for threats in allowed traffic. Security profiles are sets of rules or settings that define how the firewall will inspect...
Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)
Which two elements of the Palo Alto Networks platform architecture enable security orchestration in a software-defined network (SDN)? (Choose two.)A . Full set of APIs enabling programmatic control of policy and configurationB . VXLAN support for network-layer abstractionC . Dynamic Address Groups to adapt Security policies dynamicallyD . NVGRE support...
Which solution is best for securing an EKS environment?
Which solution is best for securing an EKS environment?A . VM-Series single hostB . CN-Series high availability (HA) pairC . PA-Series using load sharingD . API orchestrationView AnswerAnswer: B Explanation: CN-Series high availability (HA) pair is the best solution for securing an EKS environment. EKS is a managed service that...
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?
A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security. How can this partition be accomplished without...
Which of the following can provide application-level security for a web-server instance on Amazon Web Services (AWS)?
Which of the following can provide application-level security for a web-server instance on Amazon Web Services (AWS)?A . VM-Series firewallsB . Hardware firewallsC . Terraform templatesD . Security groupsView AnswerAnswer: A Explanation: VM-Series firewalls can provide application-level security for a web-server instance on Amazon Web Services (AWS). VM-Series firewalls are...
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)A . Heartbeat pollingB . Ping monitoringC . Session pollingD . Link monitoringView AnswerAnswer: A, D Explanation: Heartbeat polling and link monitoring are two mechanisms that can trigger an HA failover event. Heartbeat polling is a method of...
Which protocol is used for communicating between VM-Series firewalls and a gateway load balancer in Amazon Web Services (AWS)?
Which protocol is used for communicating between VM-Series firewalls and a gateway load balancer in Amazon Web Services (AWS)?A . VRLANB . GeneveC . GRED . VMLANView AnswerAnswer: B Explanation: Geneve is the protocol used for communicating between VM-Series firewalls and a gateway load balancer in Amazon Web Services (AWS)....
Which two statements apply to the VM-Series plugin? (Choose two.)
Which two statements apply to the VM-Series plugin? (Choose two.)A . It can manage capabilities common to both VM-Series firewalls and hardware firewalls.B . It can be upgraded independently of PAN-OS.C . It enables management of cloud-specific interactions between VM-Series firewalls and supported public cloud platforms.D . It can manage...
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewalls to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?A . HA-SeriesB . CN-SeriesC . IPA-SeriesD . VM-SeriesView AnswerAnswer: D Explanation: Auto scaling templates for VM-Series...
How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?
How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?A . It must be deployed as a member of a device clusterB . It must use a Layer 3 underlay networkC . It must receive all forwarding lookups from...
