- All Exams Instant Download
How can file uploading/downloading be restricted for the website while permitting general browsing access to that website?
Assume a custom URL Category Object of "NO-FILES" has been created to identify a specific website How can file uploading/downloading be restricted for the website while permitting general browsing access to that website?A . Create a Security policy with a URL Filtering profile that references the site access setting of...
Which dynamic update type includes updated anti-spyware signatures?
Which dynamic update type includes updated anti-spyware signatures?A . Applications and Threats B. GlobalProtect Data File C. Antivirus D. PAN-DBView AnswerAnswer: A
Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?
Which interface type is part of a Layer 3 zone with a Palo Alto Networks firewall?A . Management B. High Availability C. Aggregate D. AggregationView AnswerAnswer: C
In a security policy what is the quickest way to rest all policy rule hit counters to zero?
In a security policy what is the quickest way to rest all policy rule hit counters to zero?A . Use the CLI enter the command reset rules all B. Highlight each rule and use the Reset Rule Hit Counter > Selected Rules. C. use the Reset Rule Hit Counter >...
Which log setting configuration is consistent with best practices tor normal traffic?
An administrator is reviewing another administrator s Security policy log settings Which log setting configuration is consistent with best practices tor normal traffic?A . Log at Session Start and Log at Session End both enabled B. Log at Session Start disabled Log at Session End enabled C. Log at Session...
Which three configuration settings are required on a Palo Alto networks firewall management interface?
Which three configuration settings are required on a Palo Alto networks firewall management interface?A . default gateway B. netmask C. IP address D. hostname E. auto-negotiationView AnswerAnswer: A,B,C Explanation: Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClN7CAK
Which service protects cloud-based applications such as Dropbox and Salesforce by administering permissions and scanning files for sensitive information?
Which service protects cloud-based applications such as Dropbox and Salesforce by administering permissions and scanning files for sensitive information?A . Aperture B. AutoFocus C. Parisma SaaS D. GlobalProtectView AnswerAnswer: C
How is the hit count reset on a rule?
How is the hit count reset on a rule?A . select a security policy rule, right click Hit Count > Reset B. with a dataplane reboot C. Device > Setup > Logging and Reporting Settings > Reset Hit Count D. in the CLI, type command reset hitcount <POLICY-NAME>View AnswerAnswer: A
Which objects would be useful for combining several services that are often defined together?
Which objects would be useful for combining several services that are often defined together?A . shared service objects B. service groups C. application groups D. application filtersView AnswerAnswer: B Explanation: Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/objects/objects-services.html
Which statement is true regarding a Prevention Posture Assessment?
Which statement is true regarding a Prevention Posture Assessment?A . The Security Policy Adoption Heatmap component filters the information by device groups, serial numbers, zones, areas of architecture, and other categories B. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network...
