View all questions & answers for the Palo Alto Network Security Professional (NetSec-Pro) Exam Materials exam


Palo Alto Network Security Professional (NetSec-Pro) Exam Materials-Question 23 Discussion
Comment Image Comment Image Comment Image

When a firewall acts as an application-level gateway (ALG), what does it require in order to establish a connection? (Choose one answer)

  • A. Session Initiation Protocol (SIP)
  • B. Pinholes
  • C. Payload
  • D. Dynamic IP and Port (DIPP)
Correct Answer: B

Brave-Dump Clients Votes

B 66.67%
C 33.33%

Comments



Claudio 2026-05-14 02:58:18

Selected Answers: C


What the ALG requires to establish the connection - that's payload.
Pinholes is what the ALG CREATES to allow traffic through

William Martinez 2026-05-28 00:04:23

Selected Answers: B


Technically, the ALG modifies the payload, but it requires a pinhole to establish the connection.
Correct answer is B. Pinholes
  • William Martinez 2026-05-28 00:08:15
    The PAN-OS documentation (in its Application-Level Gateways section) defines the exact behavior of the firewall: "For such applications, the firewall serves as an Application Level Gateway (ALG), and it opens a pinhole for a limited time and for exclusively transferring data or control traffic."

chaima 2026-06-04 13:57:07

Selected Answers: B


For such applications, the firewall serves as an Application Level Gateway (ALG), and it opens a pinhole for a limited time and for exclusively transferring data or control traffic. The firewall also performs a NAT rewrite of the payload when necessary

source :https://docs.paloaltonetworks.com/ngfw/administration/app-id/application-level-gateways#:~:text=For%20such%20applications%2C%20the%20firewall%20serves%20as%20an,a%20NAT%20rewrite%20of%20the%20payload%20when%20necessary.