Palo Alto Networks NetSec-Generalist Exam Questions

Question 6 of 35

When a firewall acts as an application-level gateway (ALG), what does it require in order to establish a connection?

Pinholes

Dynamic IP and Port (DIPP)

Session Initiation Protocol (SIP)

Payload

Correct Answer: A

Question 7 of 35

In which mode should an ION device be configured at a newly acquired site to allow site traffic to be audited without steering traffic?

Access

Control

Disabled

Analytics

Correct Answer: D

Question 8 of 35

A firewall administrator wants to segment the network traffic and prevent noncritical assets from being able to access critical assets on the network.
Which action should the administrator take to ensure the critical assets are in a separate zone from the noncritical assets?

Create a deny Security policy with "any" set for both the source and destination zones.

Create an allow Security policy with "any" set for both the source and destination zones.

Logically separate physical and virtual interfaces to control the traffic that passes across the interface.

Assign a single interface to multiple security zones.

Correct Answer: C

Question 9 of 35

With Strata Cloud Manager (SCM), which action will efficiently manage Security policies across multiple cloud providers and on-premises data centers?

Use snippets and folders to define and enforce uniform Security policies across environments.

Use the "Feature Adoption" visibility tab on a weekly basis to make adjustments across the network.

Allow each cloud provider's native security tools to handle policy enforcement independently.

Create and manage separate Security policies for each environment to address specific needs.

Correct Answer: A

Question 10 of 35

How are content updates downloaded and installed for Cloud NGFWs?

Through the management console

Through Panorama

Automatically

From the Customer Support Portal

Correct Answer: C