PCNSE Network Segmentation and Zone Security 2

Question 1

What is the purpose of a Virtual Wire (vwire) deployment mode in Palo Alto Networks?

Accepted Answer

To insert the firewall transparently into an existing network segment without IP addressing changes

Answer

To create VPN tunnels between sites

Answer

To provide Layer 2 switching between zones

Answer

To run the firewall in a monitoring-only mode

Question 2

Which Palo Alto Networks feature uses tags to dynamically update security policy membership based on VM or workload attributes?

Accepted Answer

Dynamic Address Groups (DAG)

Answer

Security Profiles

Answer

Static Route Tags

Answer

Zone Binding

Question 3

In a multi-vsys Palo Alto firewall, what is the function of a Virtual System (vsys)?

Accepted Answer

To create separate, isolated firewall instances on a single physical device

Answer

To provide additional throughput for high-traffic interfaces

Answer

To configure redundant management interfaces

Answer

To enable Hardware Security Modules for key storage

Question 4

What is the primary security benefit of micro-segmentation in a data center environment?

Accepted Answer

It limits lateral movement by isolating workloads and applying policy between them

Answer

It reduces the number of security policy rules required

Answer

It increases network throughput by reducing broadcast domains

Answer

It simplifies IP addressing with VLSM

Question 5

Which Palo Alto Networks feature provides packet buffer protection against single-session flood attacks that bypass rate limiting?

Accepted Answer

Zone Protection Profile - Packet Buffer Protection

Answer

Zone Protection Profile - SYN Cookies

Answer

DoS Protection Policy

Answer

Security Profile - Vulnerability Protection

Question 6

In a Palo Alto firewall, which object type allows you to reference multiple IP addresses or address ranges with a single name for use in security policy?

Accepted Answer

Address Object

Answer

Security Zone

Answer

Application Group

Answer

Service Group