Network Security Fundamentals

When deploying a firewall in a Zero Trust environment, what is the recommended stance for the default interzone policy?

Which TWO settings are configurable within a URL Filtering profile?

Which THREE of the following are valid Security Profile types?

Which interface type is used to connect the firewall to a switch for management or routing?

You are configuring a new Security Policy on a PAN-OS firewall. To adhere to the principle of least privilege, which configuration approach should you take for the destination zone and address?

Which component of the Palo Alto Networks architecture is responsible for the 'Single Pass' processing engine?

Which THREE items are necessary for a properly configured Security Policy rule?

Which THREE of the following are consequences of enabling 'Log at Session End'?

Which object type in PAN-OS should be used to group multiple IP addresses for use in a security policy?

You have a policy matching 'web-browsing' but traffic is being denied. What is the most likely cause?

Which TWO of the following are required to enable full visibility into threats inside SSL traffic?

An administrator needs to restrict access to a specific website. Which profile should be modified?

What is the function of 'Application Default' in a service object?

You have a security policy that allows 'any' application. What is the security risk of this configuration?

An administrator wants to ensure that only 'web-browsing' traffic is allowed on port 80. Which feature allows this enforcement?

When using App-ID, what happens if traffic matches a policy allowing 'web-browsing' but the application is actually 'facebook-base'?

Which THREE features are part of the Palo Alto Networks Single Pass Architecture?

Which TWO items can be used as match criteria in a Security Policy rule?

Which TWO of the following are types of User-ID mapping methods?

Which feature allows the firewall to inspect encrypted traffic for threats?

An administrator wants to block a specific file type from being uploaded. Which profile is required?

Which of the following is an example of a Security Profile?

Which TWO of the following are valid components of a PAN-OS Security Policy?

Where do you configure a URL Filtering profile?

You are troubleshooting a connection that is being blocked despite a matching policy. Which tool is best for determining which specific rule is hitting the traffic?

Which THREE are types of security policies that can be configured on a Palo Alto Networks firewall?

Why should you use an App-ID 'Group' in a security policy?

An administrator wants to use User-ID. What is the primary benefit of mapping IP addresses to usernames?

Which plane on a Palo Alto Networks firewall is responsible for the web interface and CLI?

Which action should be taken if you want to log traffic matching a specific policy?

What does the 'Zone Protection Profile' protect against?