Based on the security policy rules shown, ssh will be allowed on which port?

• A.any port
• B.only ephemeral ports
• C.same port as ssl and snmpv3
• D.the default port

Comment: *

Name: *

Email: *

Verification: *

Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

Correct Answer:

Explanation
Step 1 - Select network tab
Step 2 - Select zones from the list of available items
Step 3 - Select Add
Step 4 - Specify Zone Name
Step 5 - Specify Zone Type
Step 6 - Assign interfaces as needed

Comment: *

Name: *

Email: *

Verification: *

What do you configure if you want to set up a group of objects based on their ports alone?

• A.Address groups
• B.Custom objects
• C.Application groups
• D.Service groups

Comment: *

Name: *

Email: *

Verification: *

Drag and Drop Question
Place the following steps in the packet processing order of operations from first to last.
Select and Place:

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Which statement best describes a common use of Policy Optimizer?

• A.Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications.
• B.Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists. Admins can then manually enable policies they want to keep and delete ones they want to remove.
• C.Policy Optimizer can add or change a Log Forwarding profile for each Security policy selected.
• D.Policy Optimizer can display which Security policies have not been used in the last 90 days.

Comment: *

Name: *

Email: *

Verification: *