quiz 4

Question 1

Global user authentication is not supported by which authentication service?
Select one:

a. TACACS +

b. RADIUS

c. SAML

d. LDAP

Answer 1

LDAP

Question 2

Select True or False. On the Next Generation firewall, a commit lock blocks other administrators from committing changes until all of the locks have been released.
Select one:

a. False

b. True

Answer 2

True

Question 3

Select True or False. Server Profiles define connections that the firewall can make to external servers.
Select one:

a. True

b. False

Answer 3

True

Question 4

True or false? Certificate-based authentication replaces all other forms of either local or external authentication.
Select one:

a. False

b. True

Answer 4

True

Question 5

When creating a custom admin role, which type of privileges can not be defined?
Select one:

a. WebUI

b. Panorama

c. Command Line

d. XML API

e. REST API

Answer 5

Panorama

Question 6

When creating PAN-OS firewall administrator accounts, which configuration step is required for Non-Local Administrators, but not for Local Administrators?
Select one:

a. API Interface

b. Authentication Sequence

c. Directory Services Replication

d. Authentication Profile

Answer 6

Authentication Profile

Question 7

When resetting the PAN-OS firewall to factory defaults, you can save all configuration settings and logs by performing the following:
Select one:

a. Selecting ‘yes’ when prompted

b. Executing the CLI command when in maintenance mode: rebuild/FactoryReset

c. Pressing Shift-C when prompted

d. None of the above

Answer 7

None of the above

Question 8

Which built-in administrator role allows all rights except for the creation of administrative accounts and virtual systems?
Select one:

a. superuser

b. vsysadmin

c. Custom role

d. deviceadmin

Answer 8

deviceadmin

Question 9

Which built-in role on the Next Generation firewall is the same as superuser except for creation of administrative accounts?
Select one:

a. devicereader

b. vsysadmin

c. sysadmin

d. deviceadmin

Answer 9

deviceadmin

Question 10

Which of the following is NOT a PAN-OS Firewall Administrator Dynamic Role?
Select one:

a. Device administrator (read-only)

b. Local only administrator

c. Superuser

d. Virtual system administrator

Answer 10

Local only administrator

Question 11

Which role-based privilege allows full access to the Palo Alto Networks firewall, including defining new administrator accounts and virtual systems?
Select one:

a. superuser

b. superreader

c. devicereader

d. deviceadmin

Answer 11

superuser