Network Security Fundamentals

You are troubleshooting a connection that is being blocked despite a matching policy. Which tool is best for determining which specific rule is hitting the traffic?

Which component of the Palo Alto Networks architecture is responsible for the 'Single Pass' processing engine?

An administrator wants to ensure that only 'web-browsing' traffic is allowed on port 80. Which feature allows this enforcement?

Which object type in PAN-OS should be used to group multiple IP addresses for use in a security policy?

You have a policy matching 'web-browsing' but traffic is being denied. What is the most likely cause?

When deploying a firewall in a Zero Trust environment, what is the recommended stance for the default interzone policy?

You are configuring a new Security Policy on a PAN-OS firewall. To adhere to the principle of least privilege, which configuration approach should you take for the destination zone and address?

Where do you configure a URL Filtering profile?

An administrator wants to use User-ID. What is the primary benefit of mapping IP addresses to usernames?

An administrator needs to restrict access to a specific website. Which profile should be modified?

Which feature allows the firewall to inspect encrypted traffic for threats?

Which action should be taken if you want to log traffic matching a specific policy?

What does the 'Zone Protection Profile' protect against?

You have a security policy that allows 'any' application. What is the security risk of this configuration?

When using App-ID, what happens if traffic matches a policy allowing 'web-browsing' but the application is actually 'facebook-base'?

An administrator wants to block a specific file type from being uploaded. Which profile is required?

Which plane on a Palo Alto Networks firewall is responsible for the web interface and CLI?

Which of the following is an example of a Security Profile?

What is the function of 'Application Default' in a service object?

Why should you use an App-ID 'Group' in a security policy?

Which interface type is used to connect the firewall to a switch for management or routing?

Which TWO of the following are valid components of a PAN-OS Security Policy?

Which TWO of the following are types of User-ID mapping methods?

Which TWO settings are configurable within a URL Filtering profile?

Which THREE items are necessary for a properly configured Security Policy rule?

Which THREE of the following are valid Security Profile types?

Which THREE features are part of the Palo Alto Networks Single Pass Architecture?

Which TWO items can be used as match criteria in a Security Policy rule?

Which TWO of the following are required to enable full visibility into threats inside SSL traffic?

Which THREE are types of security policies that can be configured on a Palo Alto Networks firewall?

Which THREE of the following are consequences of enabling 'Log at Session End'?