- All Exams Instant Download
What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?
What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?A . Run a Perl script to regularly check for updates and alert when one is releasedB . Monitor update announcements and manually push updates to CrewallC . Store updates on an...
What is an advantage of having WildFire machine learning (ML) capability Inline on the firewall?
What is an advantage of having WildFire machine learning (ML) capability Inline on the firewall?A . It eliminates of the necessity for dynamic analysis in the cloudB . It enables the firewall to block unknown malicious files in real time and prevent patient zero without disrupting business productivityC . It...
What will best enhance security of a production online system while minimizing the impact for the existing network?
What will best enhance security of a production online system while minimizing the impact for the existing network?A . Layer 2 interfacesB . active / active high availability (HA)C . Virtual wireD . virtual systemsView AnswerAnswer: C
What is the default behavior in PAN-OS when a 12 MB portable executable (PE) fe is forwarded to the WildFire cloud service?
What is the default behavior in PAN-OS when a 12 MB portable executable (PE) fe is forwarded to the WildFire cloud service?A . PE File is not forwarded.B . Flash file is not forwarded.C . PE File is forwardedD . Flash file is forwardedView AnswerAnswer: C
Which two of the following does decryption broker provide on a NGFW? (Choose two.)
Which two of the following does decryption broker provide on a NGFW? (Choose two.)A . Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only onceB . Eliminates the need for a third party SSL decryption option which allows you to...
Which two features can be enabled to support asymmetric routing with redundancy on a Palo Alto networks next-generation firewall (NGFW)? (Choose two.)
Which two features can be enabled to support asymmetric routing with redundancy on a Palo Alto networks next-generation firewall (NGFW)? (Choose two.)A . Active / active high availability (HA)B . Multiple virtual systemsC . non-SYN first packetD . Asymmetric routing profileView AnswerAnswer: A,C
When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?
When HTTP header logging is enabled on a URL Filtering profile, which attribute-value can be logged?A . X-Forwarded-ForB . HTTP methodC . HTTP response status codeD . Content typeView AnswerAnswer: A
Which capability of PAN-OS would address the customer's lack of visibility?
A prospective customer currently uses a firewall that provides only Layer 4 inspection and protections. The customer sees traffic going to an external destination, port 53, but cannot determine what Layer 7 application traffic is going over that port. Which capability of PAN-OS would address the customer's lack of visibility?A...
Which two methods are used to check for Corporate Credential Submissions? (Choose two.)
Which two methods are used to check for Corporate Credential Submissions? (Choose two.)A . doman credentialiterB . User-ID credential checkC . LDAP queryD . IP user mappingView AnswerAnswer: A,D
Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?
Which statement applies to Palo Alto Networks Single Pass Parallel Processing (SP3)?A . It processes each feature in a separate single pass with additional performance impact for each enabled feature.B . Its processing applies only to security features and does not include any networking features.C . It processes all traffic...
