Exam PSE Strata topic 1 question 104 discussion

Actual exam question from Palo Alto Networks's PSE Strata

Question #: 104
Topic #: 1

A customer with a legacy firewall architecture focused on port-and-protocol-level security has heard that NGFWs open all ports by default.

Which of the following statements regarding Palo Alto Networks NGFWs is an appropriate rebuttal that explains an advantage over legacy firewalls?

A. They do not consider port information, instead relying on App-ID signatures that do not reference ports.
B. They protect all applications on all ports while leaving all ports open by default.
C. They can control applications by application-default service ports or a configurable list of approved ports on a per-policy basis.
D. They keep ports closed by default, only opening after understanding the application request, and then opening only the application-specified ports.

Show Suggested Answer

Suggested Answer: C 🗳️

by ArangoTopics at July 10, 2023, 1:53 p.m.

Comments

Submit Cancel

Robesque

7 months, 3 weeks ago

Selected Answer: D

Overall, option D provides an accurate description of how Palo Alto Networks NGFWs manage ports, emphasizing their ability to enhance security while offering greater flexibility and control over network traffic compared to legacy firewalls.

upvoted 1 times

...