The control plane provides which two managment feature of the firewall?
reporting
firewall configuration
A virtual wire interface that receives a
... [Show More] frame or packet ignores any Layer 2 or layer 3 addresses for switching or routing purposes?
True
how often are new anti-virus signatures published?
daily
what does palo alto networks use to regularly post updates for application detection, threat protection, and GlobalProtect data files?
dynamic updates
which layer 2 interfaces used to switch traffic between?
other layer 2 interfaces
customized profiles can be used to minimize antivirus inspection for traffic between trusted security zones?
true
palo alto networks next-generation firewalls are available as physical appliances and in which two other formats?
cloud-delivered services
virtual machines
a final system reboot must be performed to put the new pan-os software into production?
true
pan-os software supports which two authentication types?
kerberos
radius
palo alto networks NGFW detect known and unknown threats, including those within encrypted traffic, using intelligence generated across many thousands of customer deployments
true
what are the 2 basic types of NAT?
source nat
destination nat
config logs display entries for which kind of firewall changes?
configuration
what is the default metric value of static routes?
10
palo alto networks has reduced latency using the single-pass parallel processing (SP3) architecture, which combines which two complementary components?
parallel processing hardware
single-pass software
what does path monitoring use to monitor upstream interfaces on remote, reliable paths?
icmp pings
palo alto networks provides advanced protection for consistent security across which 2 cloud providers?
google cloud platform
amazon web services
if the NGFW reboots before you commit your changes, how can you revert that candidate config to the current snapshot to restore changes you made between the last commit and the last snapshot?
revert to the last saved configuration
virtual wire interfaces can be subdivided into virtual wire subinterfaces that can be used to classify traffic according to vlan tags, ip addresse3s, ip ranges or subnets?
true
what are 2 url filtering security profile actions?
allow
continue
what does the saved named configuration snapshot option do?
creates a candidate config snapshopt that does not overwrite the default snapshot (.snapshot.xml)
the application framework consists of which 2 components?
infrastructure
apps
which 2 methods can be used to manage pa NGFW
web interface
xml api
what are the 2 components of rule usage?
first hit
hit count
last hit
how does global protect cloud service provide NGFW security delivered from the cloud?
globally
a virtual wire interface is used to pass traffic through a firewall by binding 2 ethernet interfaces?
true
when safe search enforments is enabled, the firewall blocks search results if the end user is not using the strictest safe search settings in the search query
true
applications can change during the lifetime of a session
true
which 2 agents can be used to monitor servers and gather user-id information?
built in agent inside the pan-os firewall
windows-based client
what are two types of security profiles?
antivirus
url filtering
which 3 items are prot of the palo alto networks security operating platform?
threat intelligence cloud
next-generation firewall
advanced endpoint protection
what is an application shift
an application change during the lifetime of a session
a zone protection profile is applied to an ingress zone
true
cloud security is delivered in which 3 ways
api security
inline security
host security
how often are new and modified threat signatures and modified applications signatures published
weekly
what are 2 dynamic roles?
superuser
device administrator
the data plane provides which 2 data processing features of the firewall?
network processing [Show Less]