PCNSE PCNSE Firewall Technology and Architecture 3

Question 1

What is the maximum number of virtual systems (vsys) supported on the Palo Alto Networks PA-7080 platform?

Accepted Answer

125

Answer

The PA-7080 supports up to 125 virtual systems, making it suitable for large multi-tenant deployments.

Question 2

In Palo Alto Networks NGFW, what does 'positive enforcement model' mean?

Accepted Answer

Only explicitly allowed traffic is permitted; all else is denied

Answer

The positive enforcement model means the firewall denies all traffic by default and only permits traffic that matches an explicit allow rule.

Question 3

Which Palo Alto Networks feature provides Layer 2 segmentation by forwarding traffic based on MAC addresses without routing?

Accepted Answer

Layer 2 deployment mode

Answer

Layer 2 deployment mode enables the firewall to act as a transparent bridge, forwarding traffic based on MAC addresses within the same broadcast domain.

Question 4

When configuring High Availability (HA) on Palo Alto Networks firewalls, what is the purpose of the HA2 link?

Accepted Answer

Session state and table synchronization

Answer

The HA2 link synchronizes session tables, forwarding tables, and IPsec SA information between active and passive peers to enable seamless failover.

Question 5

Which Palo Alto Networks NGFW feature uses machine learning to create behavioral models for detecting unknown malware?

Accepted Answer

WildFire

Answer

WildFire uses machine learning and dynamic analysis in a cloud-based sandbox to detect and generate protections for previously unknown malware.

PCNSE Exam Practice Test

PCNSE Exam Practice Test

PCNSE PCNSE Firewall Technology and Architecture 3