nerdexam
Palo_Alto_Networks

PSE-STRATA · Question #24

A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal

The correct answer is B. Default policies block all interzone traffic. Palo Alto Networks empowers you to control. See the full explanation below for the reasoning.

Question

A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default. What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

Options

  • APalo Alto Networks does not consider port information, instead relying on App-ID signatures that
  • BDefault policies block all interzone traffic. Palo Alto Networks empowers you to control
  • CPalo Alto Networks keep ports closed by default, only opening ports after understanding the
  • DPalo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    82% (28)
  • C
    9% (3)
  • D
    6% (2)

Community Discussion

No community discussion yet for this question.

Full PSE-STRATA Practice