- All Exams Instant Download
In the example security policy shown, which two websites fcked? (Choose two.)
In the example security policy shown, which two websites fcked? (Choose two.) A . LinkedIn B. Facebook C. YouTube D. AmazonView AnswerAnswer: A,B
Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?
Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?A . URL traffic B. vulnerability protection C. anti-spyware D. antivirusView AnswerAnswer: C
At which point in the app-ID update process can you determine if an existing policy rule is affected by an app-ID update?
At which point in the app-ID update process can you determine if an existing policy rule is affected by an app-ID update?A . after clicking Check New in the Dynamic Update window B. after connecting the firewall configuration C. after downloading the update D. after installing the updateView AnswerAnswer: A...
URL categories can be used as match criteria on which two policy types? (Choose two.)
URL categories can be used as match criteria on which two policy types? (Choose two.)A . authentication B. decryption C application override C. NATView AnswerAnswer: A,B Explanation: Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url-category-as-policy-match-criteria.html
Which statement is true about Panorama managed devices?
Which statement is true about Panorama managed devices?A . Panorama automatically removes local configuration locks after a commit from Panorama B. Local configuration locks prohibit Security policy changes for a Panorama managed device C. Security policy rules configured on local firewalls always take precedence D. Local configuration locks can be...
What configuration-changes should the Firewall-admin make?
A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone . What configuration-changes should the Firewall-admin make?A . Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a...
Which two methods will allow the employees to get to the PowerBall Lottery site without the company unlocking the gambling URL category?
The PowerBall Lottery has reached a high payout amount and a company has decided to help employee morale by allowing employees to check the number, but doesn’t want to unblock the gambling URL category. Which two methods will allow the employees to get to the PowerBall Lottery site without the...
Which type of address object is www.paloaltonetworks.com?
Which type of address object is www.paloaltonetworks.com?A . IP range B. IP netmask C. named address D. FQDNView AnswerAnswer: D
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?
Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?A . Root B. Dynamic C. Role-based D. SuperuserView AnswerAnswer: C
How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?
How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?A . Disable automatic updates during weekdays B. Automatically “download and install” but with the “disable new applications” option used C. Automatically “download only” and then install Applications...
