CNSA 352 Questions with 100% Correct Answers
Palo Alto NGFWs enable you to adopt security best practices to minimize opportunities
for attack by using the following *three* policy types... -Answer- Application, User, a
...
CNSA 352 Questions with 100% Correct Answers
Palo Alto NGFWs enable you to adopt security best practices to minimize opportunities
for attack by using the following *three* policy types... -Answer- Application, User, and
Content based policies.
T/F:
Palo Alto NGFWs allow you to automate workflows via integration with administrative
tools such as ticketing services, or any system with a RESTful API. -Answer- True
What are the *three* families of Palo Alto NGFWs? -Answer- 1) VM Series
2) Prisma Access (Cloud Firewall SaaS)
3) Physical Firewalls
Name at least *three* of the physical Palo Alto NGFW models. -Answer- 1) PA-220
2) PA800
3) PA-3200
4) PA-5200
5) PA-7000
Older models include: PA-200, PA-500, PA-3000 and PA-5000.
What capabilities does Palo Alto Traps *Advanced Endpoint Protection* provide? -
Answer- Advanced Endpoint Protection blocks: exploits, ransomware, malware, and
fileless attacks to minimize infected endpoints and servers.
What does *AutoFocus* provide? -Answer- AutoFocus provides instant access to
community-based threat data, enhanced with deep context and attribution from the Unit
42 threat research team, saving analysts time and effort.
How often is the WildFire cloud database updated? -Answer- Approximately every *5*
minutes.
What is Palo Alto *WildFire*? -Answer- WildFire is a cloud based malware analysis and
zero day exploit detection feature.
What is Palo Alto *Threat Prevention*? -Answer- Threat Prevention is an IPS feature for
detecting network signatures.
What is Palo Alto *URL Filtering*? -Answer- URL Filtering is a feature for categorizing
web traffic and preventing phishing attempts.
What is Palo Alto *MineMeld*? -Answer- MineMeld is a threat intelligence aggregation
tool for gathering and applying IOCs at the firewall.What is Palo Alto *Cortex Data Lake*? -Answer- Cortex Data Lake is a tool for collecting
and managing vast amounts of security logs.
What is Palo Alto *Cortex XDR*? -Answer- Cortex XDR is a machine learning *UBA
tool*, for detecting post-intrusion activities, such as risky behavior, data exfiltration, or
anomalies.
The Palo Alto Networks Security Operating Platform is designed for which *three*
purposes?
A) consume innovations quickly
B) ensure compliance
C) focus on what matters
D) prevent successful cyberattacks -Answer- *A)* consume innovations quickly
*C)* focus on what matters
*D)* prevent successful cyberattacks
Which item is not one of the six primary components of the Palo Alto Networks Security
Operating Platform?
A) applications (Palo Alto Networks applications, third-party applications, customer
applications)
B) Cloud-Delivered Security Services
C) WildFire
D) Cortex and Cortex Data Lake
E) Network Security
F) Advanced Endpoint Protection
G) Cloud Security -Answer- *C)* WildFire
[Show More]