EMT Practice Test

1. Question Content...

---

Question1: Which profile or policy should be applied to protect against port scans from the internet?

Question2: What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

Question3: What action would address the sub-optimal traffic path shown in the figure?
Key:
RN - Remote Network
SC - Service Connection
MU GW - Mobile User Gateway

Question4: Which task would be identified in Best Practice Assessment tool?

Question5: A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today's security infrastructure.
Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?

Question6: Which CLI command will allow you to view latency, jitter and packet loss on a virtual SD-WAN interface?
A)

B)

C)

D)

Question7: The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTP decoder for URL filtering is handled by which component in the NGFW?

Question8: Decryption port mirroring is now supported on which platform?

Question9: What are three considerations when deploying User-ID? (Choose three.)

Question10: Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

Question11: Which two configuration items are required when the NGFW needs to act as a decryption broker for multiple transparent bridge security chains? (Choose two.)

Question12: An administrator wants to justify the expense of a second Panorama appliance for HA of the management layer.
The customer already has multiple M-100s set up as a log collector group. What are two valid reasons for deploying Panorama in High Availability? (Choose two.)

Question13: There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?

Question14: When the Cortex Data Lake is sized for Traps Management Service, which two factors should be considered? (Choose two.)

Question15: What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

Question16: An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

Question17: Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer's current security posture?

Question18: Which three new script types can be analyzed in WildFire? (Choose three.)

Question19: Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

Question20: A company has deployed the following
* VM-300 firewalls in AWS
* endpoint protection with the Traps Management Service
* a Panorama M-200 for managing its VM-Series firewalls
* PA-5220s for its internet perimeter,
* Prisma SaaS for SaaS security.
Which two products can send logs to the Cortex Data Lake? (Choose two).

Question21: In which two ways can PAN-OS software consume MineMeld outputs? (Choose two.)

Question22: Which two network events are highlighted through correlation objects as potential security risks? (Choose two.)

Question23: A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

Question24: Which three considerations should be made prior to installing a decryption policy on the NGFW? (Choose three.)

Question25: What are the three possible verdicts in WildFire Submissions log entries for a submitted sample? (Choose four.)

Question26: Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

Question27: Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

Question28: An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category Which two timeframe options are available to send this report? (Choose two.)

Question29: Which three items contain information about Command-and-Control (C2) hosts? (Choose three.)

Question30: Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two.)

Question31: Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?