Interview Questions.

Question 1. In A New Firewall, Which Port Provides Webui Access By Default?

Answer :

Management port.

Question 2. The Management Network Port On A Firewall Can Be Configured As Which Type Of Interface?

Answer :

Layer 3.

Networking Interview Questions
Question three. How Does Panorama Handle Incoming Logs When It Reaches The Maximum Storage Capacity?

Answer :

Panorama routinely delete older logs to create space for brand spanking new ones.

Question four. In An Enterprise Deployment, A Network Security Engineer Wants To Assign To A Group Of Administrators Without Creating Local Administrator Accounts On The Firewall. Which Authentication Method Must Be Used?

Answer :

RADIUS with Vendor-Specific Attributes.

Networking Tutorial
Question 5. When A Malware-infected Host Attempts To Resolve A Known Command-and-manipulate Server, The Traffic Matches A Security Policy With Dns Sinkhole Enabled, Generating A Traffic Log. What Will Be The Destination Ip Address In That Log Entry?

Answer :

The IP Address specified in the sinkhole configuration.

Network Security Interview Questions
Question 6. A Network Design Change Requires An Existing Firewall To Start Accessing Palo Alto Updates From A Data Plane Interface Address Instead Of The Management Interface. Which Configuration Setting Needs To Be Modified?

Answer :

Service direction.

Question 7. What Must Be Used In Security Policy Rule That Contains Addresses Where Nat Policy Applies?

Answer :

Pre-NAT cope with and Post-Nat zones.

Network Security Tutorial Computer Network Security Interview Questions
Question eight. The Configuration Of A Dos Protection Profile Can Defend Nodes From Which Attacks?

Answer :

Floods.

Question 9. Does The App Conform To The Common Information Model?

Answer :

Yes! The Common Information Model (CIM) is a fixed of standards and an app that help other apps conform to a common naming and tagging scheme. This permits Splunk users to look for records throughout multiple styles of logs from more than one providers the use of the identical area names to get right of entry to the facts, which eases correlations across one-of-a-kind forms of records. For example, a Splunk consumer could correlate among firewall logs and web server logs. To Splunk for Palo Alto Networks app conforms strictly to the Common Information Model.

Firewall Support Interview Questions
Question 10. Does The App Have A Data Model?

Answer :

Yes! In Splunk 6.X, the records model function allows Splunk users to fast visualize and examine statistics with a factor-and-click interface (as opposed to the Splunk seek bar language). This functionality calls for that the statistics be modeled into a Splunk Data Model that's a highly extended summary index of the information. Not most effective is there a statistics model for all Palo Alto Networks logs, all of the app’s dashboards are based on this increased statistics model for extraordinarily fast facts retrieval and visualization. So the app itself is the use of the equal Data Model that Splunk directors could use to generate visualizations.

Question eleven. What Kinds Of Data Does The App Take In?

Answer :

The Splunk for Palo Alto Networks app accepts syslog from Firewalls, Panorama, and Endpoint Security Manager. Also, Wildfire malware reviews are pulled from the Wildfire portal as XML. These reviews constitute a behavioral fingerprint of any malware detected via Wildfire which you could correlate against different logs to hit upon signs of compromise.

Cisco Nexus switches Interview Questions
Question 12. Why Use Palo Alto Networks With My Splunk?

Answer :

Splunk has unrivaled capability to consume and examine information, but for Splunk to give usable and actionable insights, it ought to have the best degree of visibility and know-how viable. Palo Alto Networks gives that level of visibility into the network and the endpoint to come across and even predict malicious activity. When a hallmark of compromise is detected, Palo Alto Networks and Splunk paintings collectively to take action and remediate problems automatically to hold the community comfy.

Networking Interview Questions
Question thirteen. Why Use Splunk With My Palo Alto Networks Products?

Answer :

Palo Alto Networks products offer wonderful levels of visibility into community visitors and malicious hobby, each inside the network and at the endpoint. Combining this visibility with Splunk lets in a consumer to make correlations and carry out analytics around different types of facts. These correlations may be between specific types of Palo Alto Networks information, as an instance, correlating Wildfire reviews in opposition to site visitors logs to hit upon infected hosts, or correlating firewall logs with endpoint logs. But the actual energy of Splunk is correlations and analytics across multiple assets of records and a couple of vendors, as an instance, correlating firewall logs with webserver logs, or superior endpoint safety logs with Windows event logs.