Pcnsa EXAMS GRADED A+
VM-Series firewalls starting with PAN-OS version 8.0, the MGT port is configured with? - ✔✔IP address
DHCP
What configuration is the actual configuration which controls the firewall operation?
Service
XML
Candidate
Running - ✔✔Running
A network engineer clicks "Save candidate configuration" to save the configuration to memory to finish
the configuration later.
After the engineer continues editing and click "Save candidate configuration" again, the
configuration that is saved in memory is overwritten.
What type of memory is this saved configuration stored in?
Read only
Non-volatile memory
Volatile memory
Flash memory - ✔✔Volatile memory
Initial firewall configuration is achieved by connecting to the MGT port or to the firewall serial console
port.
,This type of connection is called?
In-band
Direct
In-direct
Out-of-band - ✔✔Out-of-band
True or false? An application filter is an object that statically groups applications based on the attributes
of the application that you pick from the App-ID database. - ✔✔False
True or false? The Palo Alto Networks firewall includes a predefined, read/write default Antivirus
Security Profile. - ✔✔False
True or false? Data Filtering Profiles are used to prevent sensitive, confidential and proprietary
information from entering your network. - ✔✔False
In which zone type the interface cannot be assigned? - ✔✔Vwire
Layer 3
Tunnel
Tap
Layer 2
In which Next Generation Firewall feature metadata from all sources will be filtered, unduplicated, and
unified, enabling security teams to determine a more actionable data set that has been enriched from
multiple sources?
Aperture
,Autofocus
GlobalProtect
MineMeld - ✔✔MineMeld
Which Next Generation Firewall plane can be accessed from the console/mgt interface and provides
configuration, logging, and reporting functions?
Network
Signature
Data
Security
Control - ✔✔Control
What version of Netflow the firewall can generate and export NetFlow records to an outside NetFlow
collector?
Net flow ver 1
Net flow ver 3
Net flow ver 5
Net flow ver 9 - ✔✔Net flow ver 9
Which model of the Palo Alto Next Generation VM series needs a minimum of 16 GB of memory and 60
GB of dedicated disk drive capacity?
VM-700
VM-100
VM-50
, VM-500 - ✔✔VM-500
What is default action setting when configuring Security Policy Rule?
Reset client
Deny
Drop
Allow - ✔✔Allow
Antivirus updated content is made available by Palo Alto Networks on the following schedule?
5 min
Monthly
Daily
Weekly - ✔✔Daily
Applications and Threats updated content is made available by Palo Alto Networks on the following
schedule?
Daily
Monthly
Weekly
5 min - ✔✔Weekly
The PAN-OS DIPP NAT implementation supports oversubscription on some platforms.
What is DIPP NAT Oversubscription? - ✔✔Increase port numbers available for DIPP
VM-Series firewalls starting with PAN-OS version 8.0, the MGT port is configured with? - ✔✔IP address
DHCP
What configuration is the actual configuration which controls the firewall operation?
Service
XML
Candidate
Running - ✔✔Running
A network engineer clicks "Save candidate configuration" to save the configuration to memory to finish
the configuration later.
After the engineer continues editing and click "Save candidate configuration" again, the
configuration that is saved in memory is overwritten.
What type of memory is this saved configuration stored in?
Read only
Non-volatile memory
Volatile memory
Flash memory - ✔✔Volatile memory
Initial firewall configuration is achieved by connecting to the MGT port or to the firewall serial console
port.
,This type of connection is called?
In-band
Direct
In-direct
Out-of-band - ✔✔Out-of-band
True or false? An application filter is an object that statically groups applications based on the attributes
of the application that you pick from the App-ID database. - ✔✔False
True or false? The Palo Alto Networks firewall includes a predefined, read/write default Antivirus
Security Profile. - ✔✔False
True or false? Data Filtering Profiles are used to prevent sensitive, confidential and proprietary
information from entering your network. - ✔✔False
In which zone type the interface cannot be assigned? - ✔✔Vwire
Layer 3
Tunnel
Tap
Layer 2
In which Next Generation Firewall feature metadata from all sources will be filtered, unduplicated, and
unified, enabling security teams to determine a more actionable data set that has been enriched from
multiple sources?
Aperture
,Autofocus
GlobalProtect
MineMeld - ✔✔MineMeld
Which Next Generation Firewall plane can be accessed from the console/mgt interface and provides
configuration, logging, and reporting functions?
Network
Signature
Data
Security
Control - ✔✔Control
What version of Netflow the firewall can generate and export NetFlow records to an outside NetFlow
collector?
Net flow ver 1
Net flow ver 3
Net flow ver 5
Net flow ver 9 - ✔✔Net flow ver 9
Which model of the Palo Alto Next Generation VM series needs a minimum of 16 GB of memory and 60
GB of dedicated disk drive capacity?
VM-700
VM-100
VM-50
, VM-500 - ✔✔VM-500
What is default action setting when configuring Security Policy Rule?
Reset client
Deny
Drop
Allow - ✔✔Allow
Antivirus updated content is made available by Palo Alto Networks on the following schedule?
5 min
Monthly
Daily
Weekly - ✔✔Daily
Applications and Threats updated content is made available by Palo Alto Networks on the following
schedule?
Daily
Monthly
Weekly
5 min - ✔✔Weekly
The PAN-OS DIPP NAT implementation supports oversubscription on some platforms.
What is DIPP NAT Oversubscription? - ✔✔Increase port numbers available for DIPP
