PALO ALTO NETWORKS -Accredited Configuration Engineer Set 2

1.

Which local interface cannot be assigned to the IKE gateway?

Tunnel L3 VLAN Loopback

2.

To allow the PAN device to resolve internal and external DNS host names for reporting and for security policies, an administrator can do the following:

Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, point to this proxy object for DNS resolution. In the device settings define internal hosts via a static list. In the device settings set the Primary DNS server to an external server and the secondary to an internal server. Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, select theproxy object as the Primary DNS and create a custom security rule which references that object for

3.

With PAN-OS 5.0, how can a common NTP value be pushed to a cluster of firewalls?

Via a Panorama Template Via a shared object in Panorama Via a Panorama Device Group Via a Device Group object in Panorama

4.

Which of the following Global Protect features requires a separate license?

Use of dynamic selection between multiple Gateways Use of a Portal to allow users to connect Allowing users to connect Manual Gateway Selection

5.

Which of the following represents HTTP traffic events that can be used to identify potential Botnets?

Traffic from users that browse to IP addresses instead of fully-qualified domain names, downloading W32.Welchia.Worm from a Windows share, traffic to domains that have been registered in the last 30 days, downloading executable files from unknown URL's Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 60 days,downloading executable files from unknown URL's Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 60 days,downloading executable files from unknown URL's, IRC-based Command and Control traffic Traffic from users that browse to IP addresses instead of fully-qualified domain names, traffic to domains that have been registered in the last 30 days.

6.

For correct routing to SSL VPN clients to occur, the following must be configured:

Network Address Translation must be enabled for the SSL VPN client IP pool A dynamic routing protocol between the Palo Alto Networks device and the next-hop gateway to advertise the SSL VPN client IP pool A static route on the next-hop gateway of the SSL VPN client IP pool with a destination of the Palo Alto Networks device No routing needs to be configured - the PAN device automatically responds to ARP requests for the SSL VPN client IP pool

7.

Which option allows an administrator to segrate Panorama and Syslog traffic, so that the Management Interface is not employed when sending these types of traffic?

Custom entries in the Virtual Router, pointing to the IP addresses of the Panorama and Syslog devices. Define a Loopback interface for the Panorama and Syslog Devices On the Device tab in the Web UI, create custom server profiles for Syslog and Panorama Service Route Configuration

8.

What new functionality is provided in PAN-OS 5.0 by Palo Alto Networks URL Filtering Database (PAN-DB)?

The "Log Container Page Only" option can be employed in a URL-Filtering policy to reduce the number of logging events. URL-Filtering can now be employed as a match condition in Security policy IP-Based Threat Exceptions can now be driven by custom URL categories Daily database downloads for updates are no longer required as devices stay in-sync with the cloud.

9.

For non-Microsoft clients, what Captive Portal method is supported?

NTLM Auth User Agent Local Database Web Form Captive Portal

10.

In order to route traffic between layer 3 interfaces on the PAN firewall you need:

VLAN Vwire Security Profile Virtual Router

PALO ALTO NETWORKS -Accredited Configuration Engineer Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

PALO ALTO NETWORKS -Accredited Configuration Engineer Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner