____________________________________________________________________________
Question 1 of 28. The VM-Series supports which four of the following virtualized environments? (Choose four.)
Linux VServer Citrix XenServer VMware ESXi AWS Azure VMware NSX
Mark for follow up
Question 2 of 28. Which two PAN-OS tabs would an administrator use to identify compromised users after a spike in dangerous traffic is observed? (Choose two.)
Device Objects Policies Network Monitor ACC
Question 3 of 28.
WildFire now supports w hich major family of threat cloud virtual operating systems?
Windows XP, Windows Vista, Windows 7, and Windows 8 Windows XP, Windows 7, Android, and iOS Windows XP, Windows Vista, and Windows 7 Windows, Linux, and Android
Mark for follow up
Question 4 of 28. Which three features would prevent a successful attempt during the exfiltration stage of the attack chain? (Choose three.)
URL filtering GlobalProtect File blocking WildFire DNS monitoring and sinkholing
Mark for follow up
Question 5 of 28. True or false: PAN-DB is a service that aligns URLs with category types defined by Palo Alto Networks. Websites are classified through various means, including data provided by the Threat Intelligence Cloud.
True
False
Mark for follow up
Question 6 of 28. What does App-ID inspect to identify an application?
Source port Hash Encryption key TTL Data payload Source IP
Mark for follow up
Question 7 of 28. Which two critical features of an NGFW (next-generation firewall) provide breach prevention? (Choose two.)
Alarm generation of known threats traversing the device Centralized or distributed Log Collectors Application visibility and URL categorization Processing all traffic across all ports and protocols, in both directions Endpoint and server scanning for known malware
Mark for follow up
Question 8 of 28. Which hardware firewall platforms include both built-in front-to-back airflow and redundant power supplies?
PA-7000 Series PA-800 Series PA-5200 Series All Palo Alto Networks hardware
Mark for follow up
Question 9 of 28. What are the four failure areas of legacy security architectures? (Choose four.)
Require headcount Limited visibility Limited places in the network Lack correlation ROI Manual response
Mark for follow up
Question 10 of 28. True or false: Antivirus inspection is proxy-based.
True
False
Mark for follow up
Question 11 of 28. What is the URL for the full list of applications recognized by Palo Alto Networks?
https://applipedia.paloaltonetworks.com https://www.MyApplipedia.com https://applications.paloaltonetworks.com https://www.Applipedia.com
Mark for follow up
Question 12 of 28. True or false: Many customers purchase the Palo Alto Networks platform to gain previously unavailable levels of visibility into their applications, data, and network traffic.
True
False
Mark for follow up
Question 13 of 28. True or false: An employee takes a corporate laptop, with Traps installed, on a weekend camping trip. The employee's spouse has brought a USB stick with music to listen to. The USB stick contains music files that have been we aponized. The laptop has no network connectivity when the weaponized files are launched and therefore the system is vulnerable to being exploited and compromised.
True
False
Mark for follow up
Question 14 of 28. If malware is detected on the internet perimeter, which other place in the network might be affected?
Data center Branch offices Endpoints Cloud All of the above
Mark for follow up
Question 15 of 28. Which three options describe the key components of a successful Platform Demo? (Choose three.)
Showing how Palo Alto Networks firewalls provide visibility into ap plications and control of those applications Providing visibility into recently occurring threats and showing how to block those threats Showing which users are running which applications and providing a method for controlling application access by user After match criteria are set in the Object tab, showing how that data is presented in the logs Presenting the information in the Network and Device tabs
Mark for follow up
Question 16 of 28. What are the three main benefits of WildFire? (Choose three.)
It uses a sandboxing environment that can detect malware by analyzing the behavior of unknown files. It gathers information from possible threats detected by NGFWs, endpoints, and Aperture. Signatures for identified malware are quickly distributed globally to al l Palo Alto Networks customers' firewalls. By collecting and distributing malware signatures from every major antivirus vendor, it can provide comprehensive protection. Because a Palo Alto Networks proprietary cloud-based architecture is used, quarantine holds on suspicious files typically are reduced to fewer than 30 seconds.
Mark for follow up
Question 17 of 28. What are the five critical places in the network where Palo Alto Networks NGFWs (next-generation firewalls) and other products are commonly deployed to solve many of toda y's enterprise security problems? (Choose five.)
Video game console Wi-Fi access point Internet perimeter Branch office Mobile/endpoint device Vehicle-mounted hotspot Virtual machine Data center perimeter
Mark for follow up Which option is not a factor impacting sizing decisions? Redundancy Number of applications Decryption Number of policy rules Performance Sessions
Mark for follow up
Question 19 of 28. Which three platform components does WildFire automatically update after finding malicious activity in previously unknown files, URLs, and APKs? (Choose three.)
Anti-malware signatures (WildFire) Management (Panorama) Content/web filtering (PAN-DB) Decrypt (Port-Mirroring) Mobile (GlobalProtect) Anti-command-and-control signatures (DNS)
Mark for follow up
Question 20 of 28. True or false: One advantage of Single-Pass Parallel Processing (SP3) is that traffic can be scanned as it crosses the firewall with a minimum amount of buffering, which in turn can allow advanced features such as virus/malware scanning without affecting firewall performance.
True
False
Mark for follow up
Question 21 of 28. Which three subscriptions for the NGFW (next-generation firewall) are valid? (Choose three.)
Support App-ID
Threat Prevention SSL Decryption User-ID Content-ID URL Filtering
Mark for follow up
Question 22 of 28. Which three features are part of the Palo Alto Networks security platform? (Choose three.)
Security Certificate Authority Threat Intelligence Cloud Unified Threat Management Advanced Endpoint Protection Security Product Governance Next-generation firewall
Mark for follow up
Question 23 of 28. Which option lists the major families of file types supported by WildFire?
All executable files, PDF files, Microsoft Office files, and Adobe Flash applets All executable files and all files with a MIME type All executable files, PDF files, and Microsoft Office files PE files, Microsoft Office, PDF, Java applets, APK, and Flash
Mark for follow up
Question 24 of 28. What is the main role of GlobalProtect?
Categorizing URLs Looking for malware on the endpoint Sandboxing files on the Threat Intelligence Cloud Extending protections and policies to endpoints
Mark for follow up
Question 25 of 28. What are five benefits of Palo Alto Networks NGFWs (next-generation firewalls)? (Choose five.)
Comprehensive security platform designed to scale functionality over time Convenient configuration wizard Feature-specific modular hardware Easy-to-use GUI that is the same on all models Seamless integration with the Threat Intelligence Cloud Identical security subscriptions on all models Predictable throughput
Mark for follow up
Question 26 of 28. How many stages in the attack chain must be stopped to prevent a successful breach?
3 5 2 1
Mark for follow up
Question 27 of 28. What does the automated correlation engine analyze?
Profiles Zones Ports Protocols Rules Exceptions Logs
Mark for follow up
Question 28 of 28. How quickly are WildFire updates about previously unknown files being delivered from the cloud to customers with a WildFire subscription?
60 minutes 5 minutes 15 minutes 30 minutes 1 day
Mark for follow up
