Which zone is available for use in Prisma Access?

Reveal Solution Hide Solution

Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM? (Choose two.)

Reveal Solution Hide Solution

A network security engineer wants to forward Strata Logging Service data to tools used by the Security Operations Center (SOC) for further investigation.

In which best practice step of Palo Alto Networks Zero Trust does this fit?

Reveal Solution Hide Solution

Which type of traffic can a firewall use for proper classification and visibility of internet of things (loT) devices?

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

To properly classify and gain visibility into Internet of Things (IoT) devices, a firewall can analyze DHCP traffic, as IoT devices frequently use DHCP for network connectivity.

Why DHCP is the Correct Answer?

IoT Devices Often Use DHCP for IP Assignment C

Most IoT devices (smart cameras, sensors, medical devices, industrial controllers) dynamically obtain

IP addresses via DHCP.

Firewalls can inspect DHCP requests to identify device types based on DHCP Option 55 (Parameter Request List) and Option 60 (Vendor Class Identifier).

Enhances IoT Security with Granular Policies C

Palo Alto Networks IoT Security uses DHCP data to assign risk scores, enforce access control policies, and detect anomalies.

Does Not Require Deep Packet Inspection C

Unlike RTP, RADIUS, or SSH, which focus on specific protocols for media streaming, authentication, and encryption, DHCP data is lightweight and easily analyzed.

Why Other Options Are Incorrect?

B. RTP (Real-Time Transport Protocol)

Incorrect, because RTP is used for media streaming (VoIP, video conferencing), not device classification.

C. RADIUS (Remote Authentication Dial-In User Service)

Incorrect, because RADIUS is an authentication protocol, not a traffic type used for IoT device classification.

D. SSH (Secure Shell)

Incorrect, because SSH is an encrypted protocol used for remote device access, not identifying IoT devices.

Reference to Firewall Deployment and Security Features:

Firewall Deployment C Firewalls use DHCP fingerprinting for IoT visibility.

Security Policies C DHCP data enables dynamic security policy enforcement for IoT devices.

VPN Configurations C Ensures IoT devices using VPN connections are correctly classified.

Threat Prevention C Detects malicious IoT devices based on DHCP metadata.

WildFire Integration C Prevents IoT devices from being used in botnet attacks.

Zero Trust Architectures C Ensures least-privilege access policies for IoT devices.

How many places will a firewall administrator need to create and configure a custom data loss prevention (DLP) profile across Prisma Access and the NGFW?

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

With Prisma Access and NGFW, a firewall administrator only needs to create and configure a custom Data Loss Prevention (DLP) profile in one place.

Why Only One Place?

Unified DLP Management C

Palo Alto Networks Enterprise DLP (E-DLP) service provides a single cloud-based policy engine for both Prisma Access and NGFWs.

DLP profiles are centrally managed and enforced across all connected firewalls and cloud services.

Panorama Integration C

If managed via Panorama, the DLP profile is created once and applied to all firewalls and Prisma

Access deployments.

Consistency Across Deployments C

A single DLP policy ensures uniform enforcement across network, branch, remote users, and cloud environments.

Why Other Options Are Incorrect?

B. Two

Incorrect, because NGFW and Prisma Access share the same DLP policy, so there’s no need to configure separately.

C. Three

Incorrect, because DLP profiles are centrally managed, reducing duplication.

D. Four

Incorrect, because DLP configuration is streamlined into a single management location for simplicity.

Reference to Firewall Deployment and Security Features:

Firewall Deployment C Single DLP policy applied to NGFW and Prisma Access.

Security Policies C Enforces DLP rules across all traffic flows.

VPN Configurations C Ensures DLP protection extends to remote users.

Threat Prevention C Detects data exfiltration in emails, web uploads, and SaaS apps.

WildFire Integration C Analyzes suspicious files for data leakage risks.

Zero Trust Architectures C Enforces strict DLP policies on all network traffic.

Thus, the correct answer is:

A. One

What will collect device information when a user has authenticated and connected to a GlobalProtect gateway?

Reveal Solution Hide Solution

What is the primary role of Advanced DNS Security in protecting against DNS-based threats?

Reveal Solution Hide Solution

Which action must a firewall administrator take to incorporate custom vulnerability signatures into current Security policies?

Reveal Solution Hide Solution

Which action must a firewall administrator take to incorporate custom vulnerability signatures into current Security policies?

Reveal Solution Hide Solution

What should be reviewed when log forwarding from an NGFW to Strata Logging Service becomes disconnected?

Reveal Solution Hide Solution