EMT Practice Test

1. Question Content...

---

Question1: Which profile or policy should be applied to protect against port scans from the internet?

Question2: In which two cases should the Hardware offering of Panorama be chosen over the Virtual Offering? (Choose two.)

Question3: Which domain permissions are required by the User-ID Agent for WMI Authentication on a Windows Server?
(Choose three.)

Question4: Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

Question5: An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

Question6: Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)

B)

C)

D)

Question7: A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at
100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

Question8: What is the basis for purchasing Cortex XDR licensing?

Question9: Which two products can send logs to the Cortex Data Lake? (Choose two.)

Question10: Which three new script types can be analyzed in WildFire? (Choose three.)

Question11: Which two steps are required to configure the Decryption Broker? (Choose two.)

Question12: An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report?
(Choose two.)

Question13: When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

Question14: Which two features are found in a Palo Alto Networks NGFW but are absent in a legacy firewall product?
(Choose two.)

Question15: A company has deployed the following
* VM-300 firewalls in AWS
* endpoint protection with the Traps Management Service
* a Panorama M-200 for managing its VM-Series firewalls
* PA-5220s for its internet perimeter,
* Prisma SaaS for SaaS security.
Which two products can send logs to the Cortex Data Lake? (Choose two).

Question16: Decryption port mirroring is now supported on which platform?

Question17: Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

Question18: Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

Question19: How do you configure the rate of file submissions to WildFire in the NGFW?

Question20: When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?