What is required to support the second generation NPCs on a PA - 7050?

The PA - 7050 cannot support the second generation NPCs; a PA - 7080 is required.

The second generation NPCs must be installed in matched pairs.

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.Which VPN configuration would adapt to changes when deployed to the future site?

Preconfigured GlobalProtect satellite

Preconfigured GlobalProtect client

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

Add a DoS Protection Profile with defined session count.

Define a custom App-ID to ensure that only legitimate application traffic reaches the server.

Add a Vulnerability Protection Profile to block the attack.

Add QoS Profiles to throttle incoming requests.

Add a DoS Protection Profile with defined session count.

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

Add a tuned DoS Protection Profile

Define a custom App-ID to ensure that only legitimate application traffic reaches the server

Add QoS Profiles to throttle incoming requests

Add a tuned DoS Protection Profile

Add an Anti-Spyware Profile to block attacking IP address

A Company needs to preconfigured firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.Which VPN configuration would adapt to changes when deployed to Hie future site?

preconfigured GlobalProtcet satellite

preconfigured GlobalProtcet client

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

Add a DoS Protection Profile with defined session count.

Define a custom App-ID to ensure that only legitimate application traffic reaches the server

Add a DoS Protection Profile with defined session count.

Add a Vulnerability Protection Profile to block the attack.

Add QoS Profiles to throttle incoming requests.

What is the result of deploying virtualization in your data center?

increased hardware capital costs

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

It can bootstrap the virtual firewall for dynamic deployment scenarios

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support

It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.

It can bootstrap the virtual firewall for dynamic deployment scenarios

It can manage the virtual firewalls' resource use, allowing for VM resource over-subscription.

It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support

How many more NPCs can fit in a PA - 7080 compared to a PA - 7050?

It depends upon whether the front - to - back airflow duct is in use.

In addition to the expanded capacity for NPCs, what else is improved in the PA - 7080 over the PA - 7050?

Front - to - back airflow is standard.

Available 100Gb p s interfaces , but only with PAN - OS 7.0 and higher

Which of these statements is true about Dynamic Address Groups?

T hey allow you to create a policy that automatically adapts to changes --- adds, moves, or deletions of servers.

They enable the flexibility to apply different rules to th e same server based on tags that define its role on the network, the operating system, or the different kinds of traffic it processes.

A dynamic address group uses tags as a filtering criterion to determine its members.

T hey allow you to create a policy that automatically adapts to changes --- adds, moves, or deletions of servers.

They enable the flexibility to apply different rules to th e same server based on tags that define its role on the network, the operating system, or the different kinds of traffic it processes.

A dynamic address group uses tags as a filtering criterion to determine its members.

The filtering criteria uses logical and , or , and not operators.

What is the difference between static and dynamic tags?

S tatic tags are part of the configuration on the firewall, but dynamic tags are part of the runtime configuration.

Static tags exist, but dynamic tags do not.

Dynamic tags exist, but static tags do not.

S tatic tags are part of the configuration on the firewall, but dynamic tags are part of the runtime configuration.

Static tags are hard coded into each VM, but dynamic tags are assigned by the firewall during runtime.

Which statement is true regarding the HA3 interface on VM - Series firewalls in an HA configuration?

There is no HA3 connection on a VM - Series firewall.

The second VM - Series firewall should be in a different host and the HA3 connection should be over a dedicated high - speed link .

The second VM - Series firewall should be in the same virtual machine so the HA3 connection does not have to travel over a physical connection .

The HA3 connection should traverse no more than a single virtual switch.

There is no HA3 connection on a VM - Series firewall.

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance

Palo Alto Networks AutoFocus generated Correlation Objects

Palo Alto Networks non-firewall products, like Traps and Aperture https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus

Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance

Palo Alto Networks AutoFocus generated Correlation Objects

Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles

WF-500 configured as private clouds for privacy concerns

Palo Alto Networks non-firewall products, like Traps and Aperture https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus

Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

Threat Prevention on the firewall, and Support on Panorama

WildFire on the firewall, and AutoFocus on Panorama

URL Filtering on the firewall, and MindMeld on Panorama

Threat Prevention on the firewall, and Support on Panorama

GlobalProtect on the firewall, and Threat Prevention on Panorama

Which two designs require virtual systems? (Choose two.)

A virtual router as a replacement for an internet-facing router

A single physical firewall shared by different organizations, each with unique traffic control needs

A shared gateway interface that does not need a full administrative boundary

A virtual router as a replacement for an internet-facing router

A single physical firewall shared by different organizations, each with unique traffic control needs

A VMware NSX deployment that needs micros segmentation

A network covers three geographical areas: Americas, Europe (EMEA), and Asia (APAC). The APAC segment of the network consists of nine HA pairs of PA-3060 firewalls, generating a combined log output of 25 K logs per second. Only 14 days of traffic log retention is required. Which management and logging solution will be effective and cost-efficient for this segment of the network?

Two M-500s in HA management at the global level, and two log collector-mode M-500s in a log collector group with 16 TB of storage for APAC

Two M-500s in HA management at the global level, with one M-100 with 4 TB of storage for APAC

Two M-500s in HA management at the global level, and one log collector-mode M-500 with 8 TB of storage for APAC

Two M-500s in HA management at the global level, and two log collector-mode M-500s in a log collector group with 16 TB of storage for APAC

Two Dual-mode M-500s in HA for both global management and storage. Each M-500 has 8 TB of storage

Palo Alto Networks PSE-DataCenter Practice Test 1 - Free Online Exam Prep & Questions

By increasing the number of vCPUs in a VM - Series firewall from 4 to 8, by what factor is performance expected to increase?

By a pproximately a factor of 2

By a pp roximately a factor of 1.8

By a pproximately a factor of 2.2

Performance will not increase

Comment (0)

Palo Alto Networks PSE-DataCenter Practice Test 1

Question

Palo Alto Networks PSE-DataCenter Practice Tests

Practice Tests