View all questions & answers for the Palo Alto Network Security Professional (NetSec-Pro) Exam Materials exam

Palo Alto Network Security Professional (NetSec-Pro) Exam Materials - Question #23 Discussion

Comment Image Comment Image Comment Image

When a firewall acts as an application-level gateway (ALG), what does it require in order to establish a connection? (Choose one answer)

  • A. Session Initiation Protocol (SIP)
  • B. Pinholes
  • C. Payload
  • D. Dynamic IP and Port (DIPP)
Correct Answer: C

Brave-Dump Community Votes

Answer: C (2 votes) 50%
Answer: B (2 votes) 50%

Community Explanations & Comments (4)

Claudio 5 months ago
Selected: C
What the ALG requires to establish the connection - that's payload.
Pinholes is what the ALG CREATES to allow traffic through
William Martinez 5 months ago
Selected: B
Technically, the ALG modifies the payload, but it requires a pinhole to establish the connection.
Correct answer is B. Pinholes
William Martinez 5 months ago
The PAN-OS documentation (in its Application-Level Gateways section) defines the exact behavior of the firewall: "For such applications, the firewall serves as an Application Level Gateway (ALG), and it opens a pinhole for a limited time and for exclusively transferring data or control traffic."
chaima 4 months ago
Selected: B
For such applications, the firewall serves as an Application Level Gateway (ALG), and it opens a pinhole for a limited time and for exclusively transferring data or control traffic. The firewall also performs a NAT rewrite of the payload when necessary

source :https://docs.paloaltonetworks.com/ngfw/administration/app-id/application-level-gateways#:~:text=For%20such%20applications%2C%20the%20firewall%20serves%20as%20an,a%20NAT%20rewrite%20of%20the%20payload%20when%20necessary.
Milad Magdy Dawod Mekhail 3 months ago
Selected: C
What does it require to establish : Payload