Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Palo Alto Networks Certified Network Security Engineer (PCNSE) · Palo Alto Networks
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B is wrong, it's specifically about DoS protection. D is correct, it's about deploying multiple firewalls for network segmentation.
D is the only reasonable one
I think it's B. Let's see: Option A tells you something that is not true, because the Palo Alto does not protect your network at all cyberattack lifecycle (for example, if you don't block an exploit delivery, then only endpoint protection could stop the next step which is exploitation and installation). Option D is not true because Zone Protection Profiles protect System (Firewall) Resources within the complete zone on which it's applied (remember ZP is granular, you decide where and where not to place it). Option C could be true, but assuming the question, the admin already has fws in the perimeter area, if he didn't, the SE wouldn't suggest to put the fws close to the servers and organizational systems. Regards.