- All Exams Instant Download
Which will be the egress interface if the traffic's ingress interface is ethernet1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?
Refer to the exhibit. Which will be the egress interface if the traffic's ingress interface is ethernet1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?A . ethernet1/6B . ethernet1/3C . ethernet1/7D . ethernet1/5View AnswerAnswer: D Explanation: In the second image, VW ports mentioned are 1/5 and 1/7. Hence it can...
What needs to be configured to ensure Panorama can retrieve user and group information for use in these rules?
An engineer creates a set of rules in a Device Group (Panorama) to permit traffic to various services for a specific LDAP user group. What needs to be configured to ensure Panorama can retrieve user and group information for use in these rules?A . A service route to the LDAP...
What type of service route can be used for this configuration?
An engineer configures a specific service route in an environment with multiple virtual systems instead of using the inherited global service route configuration. What type of service route can be used for this configuration?A . IPv6 Source or Destination AddressB . Destination-Based Service RouteC . IPv4 Source InterfaceD . Inherit...
What must the administrator do to correct this issue?
An administrator is attempting to create policies tor deployment of a device group and template stack. When creating the policies, the zone drop down list does not include the required zone. What must the administrator do to correct this issue?A . Specify the target device as the master device in...
What should the administrator consider with regards to the WildFire infra-structure?
An administrator has purchased WildFire subscriptions for 90 firewalls globally. What should the administrator consider with regards to the WildFire infra-structure?A . To comply with data privacy regulations, WildFire signatures and ver-dicts are not shared globally.B . Palo Alto Networks owns and maintains one global cloud and four WildFire regional...
In a template, which two objects can be configured? (Choose two.)
In a template, which two objects can be configured? (Choose two.)A . SD-WAN path quality profileB . Monitor profileC . IPsec tunnelD . Application groupView AnswerAnswer: BC Explanation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/network/network-network-profiles/network-network-profiles-monitor.html
What is the best definition of the Heartbeat Interval?
What is the best definition of the Heartbeat Interval?A . The interval in milliseconds between hello packetsB . The frequency at which the HA peers check link or path availabilityC . The frequency at which the HA peers exchange pingD . The interval during which the firewall will remain active...
Which three settings can be configured in this template?
An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks. Which three settings can be configured in this template? (Choose three.)A . Log Forwarding profileB . SSL decryption exclusionC ....
Which type of zone will allow different virtual systems to communicate with each other?
Which type of zone will allow different virtual systems to communicate with each other?A . TapB . ExternalC . Virtual WireD . TunnelView AnswerAnswer: B Explanation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/communication-between-virtual-systems/inter-vsys-traffic-that-remains-within-the-firewall/external-zone
What must be configured to apply tags automatically based on User-ID logs?
What must be configured to apply tags automatically based on User-ID logs?A . Device IDB . Log Forwarding profileC . Group mappingD . Log settingsView AnswerAnswer: D Explanation: To apply tags automatically based on User-ID logs, the engineer must configure a Log Forwarding profile that specifies the criteria for matching...
