第一范文网 - 专业文章范例文档资料分享平台

PaloAlto - ACE认证考试题库及答案2016-1月

来源:用户分享 时间:2025/10/8 22:10:32 本文由loading 分享 下载这篇文档手机版
说明:文章内容仅供预览,部分内容可能不全,需要完整文档或者需要复制内容,请下载word后使用。下载word有问题请添加微信号:xxxxxxx或QQ:xxxxxx 处理(尽可能给您提供完整文档),感谢您的支持与谅解。

*

Always 10 megabytes.

Configurable megabytes.

up

to

10

Configurable up to 2 megabytes. Always 2 megabytes.

Mark for follow up

Question 10 of 50.

Attackers will employ a number of tactics to hide malware. One such tactic is to encode and/or compress the file so as to hide the malware. With PAN-OS 7.0 the firewall can decode up to four levels. But if an attacker has encoded the file beyond four levels, what can you as an administer do to protect your users? *

Create a Decryption Profile for multi-level encoded files and apply it to a Decryption Policy.

Create a File Blocking Profile for multi-level encoded files with the action set to block. Create a File Blocking Profile for multi-level encoded files and apply it to a Decryption Policy.

Create a Decryption Policy for multi-level encoded files and set the action to block.

Mark for follow up

Question 11 of 50.

What will be the user experience when the safe search option is NOT enabled for Google search but the firewall has \ *

The user will be redirected to a different search site that is specified by the firewall administrator.

A block page will be presented with instructions on how to set the strict Safe Search option for the Google search.

The Firewall will enforce Safe Search if the URL filtering license is still valid. A task bar pop-up message will be presented to enable Safe Search.

Mark for follow up

Question 12 of 50.

Which of the following is NOT a valid option for built-in CLI Admin roles? *

deviceadmin

read/write devicereader

superuser

Mark for follow up

Question 13 of 50.

Palo Alto Networks firewalls support the use of both Dynamic (built-in user roles) and Role-Based (customized user roles) for Administrator Accounts. True

Mark for follow up

Question 14 of 50.

Besides selecting the Heartbeat Backup option when creating an Active-Passive HA Pair, which of the following also prevents \ *

Creating a custom interface under Service Route Configuration, and assigning this interface as the backup HA2 link.

Configuring an independent backup HA1 link.

Under “Packet Forwarding”, selecting the VR Sync checkbox.

Configuring a backup HA2 link that points to the MGT interface of the other device in the pair.

Mark for follow up

Question 15 of 50.

What are the benefits gained when the \the firewall? (Select all correct answers.)

Improved malware detection in WildFire.

False

Improved PAN-DB malware detection. Improved BrightCloud malware detection. Improved DNS-based C&C signatures.

Mark for follow up

Question 16 of 50.

Which of the following is a routing protocol supported in a Palo Alto Networks firewall? *

EIGRP RIPv2 IGRP ISIS

Mark for follow up

Question 17 of 50.

What is the default DNS sinkhole address used by the Palo Alto Networks Firewall to cut off communication? *

Any layer 3 interface address specified by the firewall administrator.

PaloAlto - ACE认证考试题库及答案2016-1月.doc 将本文的Word文档下载到电脑,方便复制、编辑、收藏和打印
本文链接:https://www.diyifanwen.net/c0yu616ckei8wrp6237vx_2.html(转载请注明文章来源)
热门推荐
Copyright © 2012-2023 第一范文网 版权所有 免责声明 | 联系我们
声明 :本网站尊重并保护知识产权,根据《信息网络传播权保护条例》,如果我们转载的作品侵犯了您的权利,请在一个月内通知我们,我们会及时删除。
客服QQ:xxxxxx 邮箱:xxxxxx@qq.com
渝ICP备2023013149号
Top