A company is considering replacing its stateless firewalls with NGFWs. The network has a mix of legacy and modern applications. The security team is concerned that the NGFW might block legitimate traffic from a legacy application that uses a proprietary protocol. What is the best approach to ensure the legacy application continues to work while still benefiting from the NGFW's security features?

Deploy the NGFW in a monitoring mode initially to identify the legacy application's traffic and create a specific allow rule based on its signature.

Deploy the NGFW and create a rule that allows all traffic from the legacy application server's IP address.

Deploy the NGFW and disable application identification for the legacy application's port.

Deploy the NGFW with all security features enabled and rely on its default rules to allow the legacy application.

A small office needs a firewall to filter traffic between two internal network segments based on IP addresses and ports. The traffic is well-understood and does not require deep inspection. Which type of firewall is most appropriate for this use case?

Next-generation firewall (NGFW)

A company is deploying an NGFW and wants to ensure that only authenticated employees can access the corporate Salesforce application, while unauthenticated users on the guest network are blocked. Which combination of NGFW features is required to enforce this policy?

Intrusion prevention to detect and block malicious traffic and application identification to recognize Salesforce.

Application identification to recognize Salesforce traffic and user identification to authenticate the user.

Stateful inspection to track connections and user identification to authenticate the user.

User identification to authenticate the user and URL filtering to block access to Salesforce.

Which integrated capability of a next-generation firewall (NGFW) is specifically designed to detect and block known exploit attempts in network traffic?

Intrusion prevention system (IPS)

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 2Objective 2

2.2 Explain the Function of Stateless Firewalls and Next-Generation Firewalls (NGFWs) CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Part of the Network Security domain, which accounts for 19% of the CYBERSECURITY-PRACTITIONER exam.

22questions here

5free pages

4concepts

19%of the exam

Questions 6–10

6foundation · easy
A next-generation firewall (NGFW) is configured to allow HTTP traffic, but the security team wants to block access to a specific social media application that uses HTTP. Which NGFW capability enables this control?
Select an answer first
7expert · hard
A company is considering replacing its stateless firewalls with NGFWs. The network has a mix of legacy and modern applications. The security team is concerned that the NGFW might block legitimate traffic from a legacy application that uses a proprietary protocol. What is the best approach to ensure the legacy application continues to work while still benefiting from the NGFW's security features?
Select an answer first
8foundation · easy
A small office needs a firewall to filter traffic between two internal network segments based on IP addresses and ports. The traffic is well-understood and does not require deep inspection. Which type of firewall is most appropriate for this use case?
Select an answer first
9application · medium
A company is deploying an NGFW and wants to ensure that only authenticated employees can access the corporate Salesforce application, while unauthenticated users on the guest network are blocked. Which combination of NGFW features is required to enforce this policy?
Select an answer first
10foundation · easy
Which integrated capability of a next-generation firewall (NGFW) is specifically designed to detect and block known exploit attempts in network traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.

2.2 Explain the Function of Stateless Firewalls and Next-Generation Firewalls (NGFWs) CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

A next-generation firewall (NGFW) is configured to allow HTTP traffic, but the security team wants to block access to a specific social media application that uses HTTP. Which NGFW capability enables this control?

A small office needs a firewall to filter traffic between two internal network segments based on IP addresses and ports. The traffic is well-understood and does not require deep inspection. Which type of firewall is most appropriate for this use case?

A company is deploying an NGFW and wants to ensure that only authenticated employees can access the corporate Salesforce application, while unauthenticated users on the guest network are blocked. Which combination of NGFW features is required to enforce this policy?

Which integrated capability of a next-generation firewall (NGFW) is specifically designed to detect and block known exploit attempts in network traffic?

Keep studying — Network Security