PCNSE Network Segmentation and Zone Security

Question 1

What is the primary purpose of security zones in Palo Alto Networks firewalls?

Accepted Answer

To logically group interfaces and enforce policy between groups

Answer

To assign bandwidth limits to interfaces

Answer

To configure routing protocols

Answer

To define NAT address pools

Question 2

In Palo Alto Networks, what type of zone is used for traffic originating from or destined to the firewall itself?

Accepted Answer

Functional Zone (MGT)

Answer

Layer 3 Zone

Answer

Tap Zone

Answer

Virtual Wire Zone

Question 3

Which zone type allows a Palo Alto firewall to monitor traffic passively without being in the traffic path?

Accepted Answer

Tap

Answer

Layer 3

Answer

Layer 2

Answer

Virtual Wire

Question 4

What is the default action for traffic between two different security zones if no matching security policy rule exists?

Accepted Answer

Deny all traffic (implicit deny)

Answer

Allow all traffic

Answer

Log only without blocking

Answer

Apply default threat profiles

Question 5

What is the default behavior for intra-zone traffic (traffic within the same zone) on a Palo Alto firewall?

Accepted Answer

Allowed by default

Answer

Denied by default

Answer

Logged but not inspected

Answer

Sent to a sandbox for analysis

Question 6

Which zone protection profile feature helps prevent resource exhaustion from SYN flood attacks?

Accepted Answer

SYN Cookies

Answer

Reconnaissance Protection

Answer

Packet Buffer Protection

Answer

Zone ACL