WorksheetsFirewall Fundamentals Day 3
Total questions: 20
Worksheet time: 14mins
Which two default zones are included with the PAN-OS software? (Choose two.)
Interzone
Trusted
Intrazone
Untusted
An Authentication profile can include which other type of profile?
Server
Admin
Customized
Built-In
Which two statements about interfaces are correct? (Choose two.)
Interfaces must be configured before you can create a zone.
Interfaces do not have to be configured before you can create a zone.
An interface can belong to only one zone.
An interface can belong to multiple zones.
Which two actions can be done with a Virtual Wire interface? (Choose two.)
NAT
route
switch
log traffic
For inbound inspection, which two actions can be done with a Tap interface? (Choose two.)
encrypt traffic
decrypt traffic
allow or block traffic
log traffic
Which two actions can be done with a Layer 3 interface? (Choose two.)
NAT
route
switch
create a virtual wire object
Which two statements are true regarding Layer 3 interfaces? (Choose two.)
You can configure a Layer 3 interface with one or more IP addresses as a DHCP client.
A Layer 3 interface can only have one DHCP assigned address.
You can assign only one IPv4 address to the same interface.
You can apply an Interface Management profile to the interface.
Which two statements are true about a Role Based Admin Role Profile role? (Choose two.)
It is a built-in role.
It can be used for CLI commands.
It can be used for XML API.
Superuser is an example of such a role.
The management console supports which two authentication types? (Choose two.)
RADIUS
LDAP
TACACS+
AWS
Which type of profile does an authentication sequence include?
Security
Authorization
Admin
Authentication
True or false? Dynamic Admin Roles are called “dynamic” because you can customize them.
true
false
Which profile is used to override global minimum password complexity requirements?
Authentication
Local
User
Password
Which interface does not require a MAC or IP address?
Layer3
Layer2
Virtual Wire
Loopback
Given the topology, which zone type should zone A and zone B to be configured with?
Layer2
Layer3
Tap
Virtual Wire
To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?
domain controller
TACACS+
LDAP
RADIUS
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?
Root
Dynamic
Role-based
Superuser
Given the topology, which zone type should you configure for firewall interface E1/1?
Virtual Wire
Layer 3
Tunnel
Tap
Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three)
SAML 1.0
SAML 2.0
Kerberos
TACACS
TACACS+
What is a prerequisite before enabling an administrative account which relies on a local firewall user database?
Configure an authentication policy
Configure an authentication profile
Configure an authentication sequence
Isolate the management interface on a dedicated management VLAN
Which two zone types are valid options? (Choose two.)
trusted
tap
virtual wire
untrusted
