Palo Alto Networks PCNSE Quiz 44 Topic 11 Questions 216-220

Question: 1

What are the differences between using a service versus using an application for Security Policy match?

AUse of a 'service' enables the firewall to take action after enough packets allow for App-ID identification

BUse of a 'service' enables the firewall to take immediate action with the first observed packet based on port numbers Use of an 'application' allows the firewall to take action after enough packets allow for App-ID identification regardless of the ports being used.

CThere are no differences between 'service' or 'application'' Use of an 'application' simplifies configuration by allowing use of a friendly application name instead of port numbers.

DUse of a 'service' enables the firewall to take immediate action with the first observed packet based on port numbers. Use of an 'application' allows the firewall to take immediate action it the port being used is a member of the application standard port list

Show Answer

Question: 2

Which feature can provide NGFWs with User-ID mapping information?

AGlobalProtect

BWeb Captcha

CNative 802.1q authentication

DNative 802.1x authentication

Show Answer

Question: 3

Which operation will impact the performance of the management plane?

AWildFire Submissions

BDoS Protection

Cdecrypting SSL Sessions

DGenerating a SaaS Application Report.

Show Answer

Question: 4

When configuring the firewall for packet capture, what are the valid stage types?

AReceive, management , transmit , and drop

BReceive , firewall, send , and non-syn

CReceive management , transmit, and non-syn

DReceive , firewall, transmit, and drop

Show Answer

Question: 5

Which User-ID method maps IP address to usernames for users connecting through a web proxy that has already authenticated the user?

AClient Probing

BPort mapping

CServer monitoring

DSyslog listening

Show Answer

Palo Alto Networks PCNSE Quiz:44 Topic:11 Questions:216-220