Wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Firewall Fundamentals Day 3

Total questions: 20

Worksheet time: 14mins

Name
Class
Date
1.

Which two default zones are included with the PAN-OS software? (Choose two.)

a)

Interzone

b)

Trusted

c)

Intrazone

d)

Untusted

2.

An Authentication profile can include which other type of profile?

a)

Server

b)

Admin

c)

Customized

d)

Built-In

3.

Which two statements about interfaces are correct? (Choose two.)

a)

Interfaces must be configured before you can create a zone.

b)

Interfaces do not have to be configured before you can create a zone.

c)

An interface can belong to only one zone.

d)

An interface can belong to multiple zones.

4.

Which two actions can be done with a Virtual Wire interface? (Choose two.)

a)

NAT

b)

route

c)

switch

d)

log traffic

5.

For inbound inspection, which two actions can be done with a Tap interface? (Choose two.)

a)

encrypt traffic

b)

decrypt traffic

c)

allow or block traffic

d)

log traffic

6.

Which two actions can be done with a Layer 3 interface? (Choose two.)

a)

NAT

b)

route

c)

switch

d)

create a virtual wire object

7.

Which two statements are true regarding Layer 3 interfaces? (Choose two.)

a)

You can configure a Layer 3 interface with one or more IP addresses as a DHCP client.

b)

A Layer 3 interface can only have one DHCP assigned address.

c)

You can assign only one IPv4 address to the same interface.

d)

You can apply an Interface Management profile to the interface.

8.

Which two statements are true about a Role Based Admin Role Profile role? (Choose two.)

a)

It is a built-in role.

b)

It can be used for CLI commands.

c)

It can be used for XML API.

d)

Superuser is an example of such a role.

9.

The management console supports which two authentication types? (Choose two.)

a)

RADIUS

b)

LDAP

c)

TACACS+

d)

AWS

10.

Which type of profile does an authentication sequence include?

a)

Security

b)

Authorization

c)

Admin

d)

Authentication

11.

True or false? Dynamic Admin Roles are called “dynamic” because you can customize them.

a)

true

b)

false

12.

Which profile is used to override global minimum password complexity requirements?

a)

Authentication

b)

Local

c)

User

d)

Password

13.

Which interface does not require a MAC or IP address?

a)

Layer3

b)

Layer2

c)

Virtual Wire

d)

Loopback

14.

Given the topology, which zone type should zone A and zone B to be configured with?

a)

Layer2

b)

Layer3

c)

Tap

d)

Virtual Wire

15.

To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

a)

domain controller

b)

TACACS+

c)

LDAP

d)

RADIUS

16.

Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

a)

Root

b)

Dynamic

c)

Role-based

d)

Superuser

17.

Given the topology, which zone type should you configure for firewall interface E1/1?

a)

Virtual Wire

b)

Layer 3

c)

Tunnel

d)

Tap

18.

Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three) 

a)

SAML 1.0 

b)

SAML 2.0

c)

Kerberos

d)

TACACS

e)

TACACS+

19.

What is a prerequisite before enabling an administrative account which relies on a local firewall user database?

a)

Configure an authentication policy

b)

Configure an authentication profile

c)

Configure an authentication sequence

d)

Isolate the management interface on a dedicated management VLAN

20.

Which two zone types are valid options? (Choose two.)

a)

trusted

b)

tap

c)

virtual wire

d)

untrusted