Firewall Fundamentals Day 5

What is the maximum number of samples that can be submitted to WildFire per day, based on a WildFire subscription?

• 1,050

• 15,100

• 7,600

• 5,000

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)

• .dll

• .exe

• .fon

• .apk

• .pdf

How often can you check for WildFire dynamic updates if you have a WildFire subscription?

• realtime

• every 1 minute

• every 5 minutes

• every 1 day

What is the size limitation of files manually uploaded to WildFire?

• Configurable up to 10 megabytes

• Hard-coded at 10 megabytes

• Hard-coded at 2 megabytes

• Configurable up to 20 megabytes

Answer explanation

Which three script types can be analyzed in WildFire? (Choose three.)

• JScript

• PowerShell Script

• VBScript

• PythonScript

• MonoScript

Answer explanation

What are two common reasons to use a "No Decrypt" action to exclude traffic from SSL decryption? (Choose two.)

• the web server requires mutual authentication

• the website matches a category that is not allowed for most users

• the website matches a high-risk category

• the website matches a sensitive category

Answer explanation

Exclude a Server from Decryption for Technical Reasons (paloaltonetworks.com)

An engineer is planning an SSL decryption implementation.

Which of the following statements is a best practice for SSL decryption?

• Obtain an enterprise CA-signed certificate for the Forward Trust certificate.

• Use an enterprise CA-signed certificate for the Forward Untrust certificate.

• Use the same Forward Trust certificate on all firewalls in the network.

• Obtain a certificate from a publicly trusted root CA for the Forward Trust certificate.

Answer explanation

If an administrator wants to decrypt SMTP traffic and possesses the server’s certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?

• TLS Bidirectional Inspection

• SSL Inbound Inspection

• SSH Forward Proxy

• SMTP Inbound Decryption

Answer explanation

Configure SSL Inbound Inspection (paloaltonetworks.com)

Which cloud‐delivered security services provides security for branches and mobile users?

• Panorama

• Cortex Data Lake

• Cortex XDR

• GlobalProtect

Which two interface types can be used when configuring GlobalProtect Portal? (Choose two.)

• Virtual Wire

• Loopback

• Layer 3

• Tunnel