- All Exams Instant Download
Which type of address object is "10 5 1 1/0 127 248 2"?
Which type of address object is "10 5 1 1/0 127 248 2"?A . IP subnet B. IP wildcard mask C. IP netmask D. IP rangeView AnswerAnswer: B
Which user-ID agent sufficient in your network?
Your company occupies one floor in a single building you have two active directory domain controllers on a single networks the firewall s management plane is only slightly utilized. Which user-ID agent sufficient in your network?A . PAN-OS integrated agent deployed on the firewall B. Windows-based agent deployed on the...
What allows a security administrator to preview the Security policy rules that match new application signatures?
What allows a security administrator to preview the Security policy rules that match new application signatures?A . Review Release Notes B. Dynamic Updates-Review Policies C. Dynamic Updates-Review App D. Policy Optimizer-New App ViewerView AnswerAnswer: B Explanation: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids-introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?
Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?A . Layer 2 B. Tap C. Layer 3 D. Virtual WireView AnswerAnswer: B
Given the topology, which zone type should zone A and zone B to be configured with?
Given the topology, which zone type should zone A and zone B to be configured with? A . Layer3 B. Tap C. Layer2 D. Virtual WireView AnswerAnswer: A
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?
When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None? A . Translation Type B. Interface C. Address Type D. IP AddressView AnswerAnswer: A
Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?
Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?A . Threat Prevention License B. Threat Implementation License C. Threat Environment License D. Threat Protection LicenseView AnswerAnswer: A
How do you reset the hit count on a security policy rule?
How do you reset the hit count on a security policy rule?A . First disable and then re-enable the rule. B. Reboot the data-plane. C. Select a Security policy rule, and then select Hit Count > Reset. D. Type the CLI command reset hitcount <POLICY-NAME>.View AnswerAnswer: C
Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?
Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?A . block B. sinkhole C. alert D. allowView AnswerAnswer: B Explanation: To enable DNS sinkholing for domain queries using DNS security, you must activate your DNS Security subscription,...
Which action would yield the information?
An administrator would like to determine the default deny action for the application dns-over-https Which action would yield the information?A . View the application details in beacon paloaltonetworks.com B. Check the action for the Security policy matching that traffic C. Check the action for the decoder in the antivirus profile...
