Which of the following are considered best practices for network hardening on Palo Alto firewalls? (Choose two)

The correct answer is B. Use User-ID and Device-ID-based policies D. Segment networks using zones. Use User-ID and Device-ID-based policies: This approach enhances security by allowing granular policy enforcement based on authenticated user identity and device information, rather than just IP addresses, improving control and reducing attack surfaces. Segment networks using zon

Network Hardening and Best Practices

Question

Options

AEnable unused administrative interfaces
BUse User-ID and Device-ID-based policies
CDisable logging
DSegment networks using zones

How the community answered

(28 responses)

A
18% (5)
B
75% (21)
C
7% (2)

Explanation

Use User-ID and Device-ID-based policies: This approach enhances security by allowing granular policy enforcement based on authenticated user identity and device information, rather than just IP addresses, improving control and reducing attack surfaces. Segment networks using zones: Network segmentation by creating zones helps isolate different network areas, limits lateral movement of threats, and enables precise policy enforcement between network segments, which is fundamental for robust security posture.

Topics

#network hardening#User-ID#zone segmentation#security best practices

Community Discussion

No community discussion yet for this question.

Full NETSEC-PRO Practice