- All Exams Instant Download
Which profile is the cause of the missing Policies tab?
An administrator logs in to the Palo Alto Networks NGFW and reports that the WebUI is missing the Policies tab. Which profile is the cause of the missing Policies tab?A . Admin RoleB . WebUIC . AuthenticationD . AuthorizationView AnswerAnswer: A
Which is not a valid reason for receiving a decrypt-cert-validation error?
Which is not a valid reason for receiving a decrypt-cert-validation error?A . Unsupported HSMB . Unknown certificate statusC . Client authenticationD . Untrusted issuerView AnswerAnswer: A
Which option should the administrator investigate as part of triage?
An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?A . Security policy rule allowing SSL to the target serverB . Firewall connectivity to a CRLC . Root certificate imported into the firewall with “Trust” enabledD . Importation of a certificate from an...
Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?
Refer to the exhibit. An administrator cannot see any of the Traffic logs from the Palo Alto Networks NGFW on Panoram a. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?...
What are two benefits of nested device groups in Panorama? (Choose two.)
What are two benefits of nested device groups in Panorama? (Choose two.)A . Reuse of the existing Security policy rules and objectsB . Requires configuring both function and location for every deviceC . All device groups inherit settings form the Shared groupD . Overwrites local firewall configurationView AnswerAnswer: BC
Which feature can provide NGFWs with User-ID mapping information?
Which feature can provide NGFWs with User-ID mapping information?A . Web CaptchaB . Native 802.1q authenticationC . GlobalProtectD . Native 802.1x authenticationView AnswerAnswer: C
Which two security policy rules will accomplish this configuration?
Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and HOST B (10.1.1.101) receives SSH traffic.) Which two security policy rules...
Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OS® software?
Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OS® software?A . XML APIB . Port MappingC . Client ProbingD . Server MonitoringView AnswerAnswer: A Explanation: Captive Portal and the other standard user mapping methods might...
Which Security Profile type will protect against worms and trojans?
An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans. Which Security Profile type will protect against worms and trojans?A . Anti-SpywareB . WildFireC . Vulnerability ProtectionD . AntivirusView AnswerAnswer: A Explanation: Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/antivirus-profiles
Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?
Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?A . Configure a Decryption Profile and select SSL/TLS services.B . Set up SSL/TLS under Polices > Service/URL Category>Service.C . Set up Security policy rule to allow SSL communication.D...
