- All Exams Instant Download
How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?
How must a Palo Alto Networks Next-Generation Firewall (NGFW) be configured in order to secure traffic in a Cisco ACI environment?A . It must be deployed as a member of a device cluster.B . It must use a Layer 3 underlay network.C . It must receive all forwarding lookups from...
How can this partition be accomplished without editing the IP addresses or the default gateways of any of the guest VMs?
A customer in a VMware ESXi environment wants to add a VM-Series firewall and partition an existing group of virtual machines (VMs) in the same subnet into two groups. One group requires no additional security, but the second group requires substantially more security. How can this partition be accomplished without...
What does the number of required flex credits for a VM-Series firewall depend on?
What does the number of required flex credits for a VM-Series firewall depend on?A . vCPU allocationB . IP address allocationC . Network interface allocationD . Memory allocationView AnswerAnswer: A
Which component can provide application-based segmentation and prevent lateral threat movement?
Which component can provide application-based segmentation and prevent lateral threat movement?A . DNS SecurityB . NATC . URL FilteringD . App-IDView AnswerAnswer: D
Which software firewall would assist a prospect who is interested in securing extensive DevOps deployments?
Which software firewall would assist a prospect who is interested in securing extensive DevOps deployments?A . CN-SeriesB . Ion-SeriesC . Cloud next-generation firewall (NGFW)D . VM-SeriesView AnswerAnswer: A
Which two features of CN-Series firewall s protect east-west traffic between pods in different trust zones? (Choose two.)
Which two features of CN-Series firewall s protect east-west traffic between pods in different trust zones? (Choose two.)A . Intrusion prevention system (IPS)B . Communication with PanoramaC . External load balancer (ELB)D . Layer 7 visibilityView AnswerAnswer: AD
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)
Which two mechanisms could trigger a high availability (HA) failover event? (Choose two.)A . Heartbeat pollingB . Ping monitoringC . Session pollingD . Link monitoringView AnswerAnswer: AD
A CN-Series firewall can secure traffic between which elements?
A CN-Series firewall can secure traffic between which elements?A . Host containersB . Source applicationsC . ContainersD . PodsView AnswerAnswer: D
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewall s to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?
Auto scaling templates for which type of firewall enable deployment of a single auto scaling group (ASG) of VM-Series firewall s to secure inbound traffic from the internet to Amazon Web Services (AWS) application workloads?A . HA-SeriesB . CN-SeriesC . PA-SeriesD . VM-SeriesView AnswerAnswer: D
Which of the following can provide application-level security for a web-server instance on Amazon Web Services (AWS)?
Which of the following can provide application-level security for a web-server instance on Amazon Web Services (AWS)?A . VM-Series firewall sB . Hardware firewall sC . Terraform templatesD . Security groupsView AnswerAnswer: A
