EMT Practice Test

1. Question Content...

---

Question1: A "Continue" action can be configured on which of the following Security Profiles?

Question2: Which statement accurately reflects the functionality of using regions as objects in Security policies?

Question3: What is the default DNS Sinkhole address used by Palo Alto Networks Firewall to cut off communication?

Question4: When creating an application filter, which of the following is true?

Question5: Which three interface types can control or shape network traffic? (Choose three.)

Question6: When configuring a Decryption Policy, which of the following are available as matching criteria in a policy? (Choose 3)

Question7: Which fields can be altered in the default Vulnerability profile?

Question8: Private, Public, Transit VIFs (Virtual interfaces) are terms related to which...
SELECT THE CORRECT ANSWER

Question9: In PAN-OS 5.0, which of the following features is supported with regards to IPv6?

Question10: When SSL traffic passes through the firewall, which component is evaluated first?

Question11: When setting up GlobalProtect, what is the job of the GlobalProtect Portal?

Question12: When configuring UserID on a Palo Alto Networks firewall, what is the proper procedure to limit User mappings to a
particular DHCP scope?

Question13: What is a challenge of using VNet peering for transit in Azure?

Question14: Which of the following platforms supports the Decryption Port Mirror function?

Question15: in an Azure setup where all VNETs are directly peered (full-mesh) using VNET Peering SELECT THE CORRECT ANSWERS

Question16: In a destination NAT configuration, which option accurately completes the following sentence? A Security policy rule shouldbe written to match the _______.

Question17: When configuring UserID on a Palo Alto Networks firewall, what is the proper procedure to limit User mappings to a particular DHCP scope?

Question18: In Active/Active HA environments, redundancy for the HA3 interface can be achieved by:

Question19: Which of the following is a routing protocol supported in a Palo Alto Networks firewall?

Question20: The User*ID feature is enabled per __________?

Question21: The "Drive-By Download" protection feature, under File Blocking profiles in Content-ID, provides:

Question22: What needs to be done prior to committing a configuration in Panorama after making a change via the CLI or web
interface on a device?

Question23: When using Config Audit, the color yellow indicates which of the following?

Question24: As the Palo Alto Networks administrator responsible for User Identification, you are looking for the simplest method of mapping network users that do not sign into LDAP. Which information source would allow reliable User ID mapping for these users, requiring the least amount of configuration?

Question25: Aviatrix platform provides rich capabilities around networking, security and operations in public cloud networks. In addition to Aviatrix Transit, it also helps customers overcome limitations of native public cloud constructs. Below, match the Aviatrix platform capability for AWS Transit Gateway (TGW) with the appropriate problem description.

Question26: A Security policy rule displayed in italic font indicates which condition?

Question27: What built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems?

Question28: Which of the following is NOT a valid option for builtin CLI Admin roles?

Question29: When configuring Admin Roles for Web UI access, what are the available access levels?

Question30: Which of the following Global Protect features requires a separate license?

Question31: When configuring a Decryption Policy Rule, which of the following are available as matching criteria in the rule? (Choose 3 answers.)

Question32: A Config Lock may be removed by which of the following users?

Question33: Match the Azure transit option below to the description which best describes it:
DRAG THE BOXES TO MATCH THE ANSWERS

Question34: An interface in Virtual Wire mode must be assigned an IP address.

Question35: Which type of license is required to perform Decryption Port Mirroring?

Question36: Which three network modes are supported by active/passive HA? (Choose three.)

Question37:
Taking into account only the information in the screenshot above, answer the following question.
An administrator is pinging 4.4.4.4 and fails to receive a response.
What is the most likely reason for the lack of response?

Question38: Enabling "Highlight Unsused Rules" in the Security policy window will:

Question39: In PANOS 6.0, rule numbers are:

Question40: Choose two examples where you would leverage the Aviatrix Controller's S2C (Site-2-Cloud) workflow?
(Choose 2)

Question41: What is a challenge of using VNet peering for transit in Azure?

Question42: As a Cloud Networking Consultant, you are reviewing a Microsoft Azure network design that will be using Microsoft Azure ExpressRoute Edge routers as transit for inter-VNet communication. What are some known challenges with this design pattern?

Question43: As the Palo Alto Networks Administrator you have enabled Application Block pages.
Afterwards, not knowing they are attempting to access a blocked web based application, users call the Help Desk to complain about network connectivity issues. What is the cause of the increased number of help desk calls?

Question44: When troubleshooting Phase 1 of an IPSec VPN tunnel, what location will have the most informative logs?

Question45: For correct routing to SSL VPN clients to occur, the following must be configured:

Question46: What is the maximum file size of .EXE files uploaded from the firewall to WildFire?

Question47: How do you limit the amount of information recorded in the URL Content Filtering Logs?

Question48: Customer has an Aviatrix Controller deployed in AW5 and wants to back up the Aviatrix Controller configuration. Where would the backup file be saved?

Question49: With IKE Phase 1, each device is identified to the other by a Peer ID. In most cases, the Peer ID is just the public IP
address of the device. In situations where the public IP address is not static, the Peer ID can be a text value.

Question50: Which routing protocol is supported on the Palo Alto Networks platform?

Question51: What are the benefits gained when the "Enable Passive DNS Monitoring" checkbox is chosen on the firewall? (Select
all correct answers.)

Question52: UserID-is enabled in the configuration of ...

Question53: Which option allows an administrator to segrate Panorama and Syslog traffic, so that the Management Interface is not
employed when sending these types of traffic?

Question54: How do you limit the amount of information recorded in the URL Content Filtering Logs?

Question55: Which Aviatrix Controller feature automates the configuration of AWS Transit Gateway, VPC Route Tables, Direct Connect learned routes and Security Domain?

Question56: In a Destination NAT configuration, the Translated Address field may be populated with either an IP address or an
Address Object.

Question57: Users may be authenticated sequentially to multiple authentication servers by configuring:

Question58: Subsequent to the installation of new licenses, the firewall must be rebooted

Question59: What are two sources of information for determining whether the firewall has been successful in communicating with
an external UserID Agent?

Question60: When configuring Security rules based on FQDN objects, which of the following statements are true?

Question61: You have decided to implement a Virtual Wire Subinterface. Which options can be used to classify traffic?

Question62: Without a WildFire subscription, which of the following files can be submitted by the Firewall to the hosted WildFire
virtualized sandbox?

Question63: Which of the following represents HTTP traffic events that can be used to identify potential Botnets?

Question64: An operator needs to create a new VPC, VCN or VNet using Aviatrix Controller.
Can the operator use Aviatrix VPC Tracker feature to validate potential CIDR/Prefix/Address space duplication across multiple clouds?