- All Exams Instant Download
Which log setting configuration is consistent with best practices tor normal traffic?
An administrator is reviewing another administrator s Security policy log settings. Which log setting configuration is consistent with best practices tor normal traffic? A. Log at Session Start and Log at Session End both enabled B. Log at Session Start disabled Log at Session End enabled C. Log at Session...
Which security policy action causes this?
An administrator would like to override the default deny action for a given application, and instead would like to block the traffic and send the ICMP code "communication with the destination is administratively prohibited". Which security policy action causes this?A . Drop B. Drop, send ICMP Unreachable C. Reset both...
What are three characteristics of the Palo Alto Networks DNS Security service? (Choose three.)
What are three characteristics of the Palo Alto Networks DNS Security service? (Choose three.)A . It uses techniques such as DGA/DNS tunneling detection and machine learning B. It requires a valid Threat Prevention license. C. It enables users to access real-time protections using advanced predictive analytics. D. It requires a...
What is a recommended consideration when deploying content updates to the firewall from Panorama?
What is a recommended consideration when deploying content updates to the firewall from Panorama?A . Before deploying content updates, always check content release version compatibility. B. Content updates for firewall A/P HA pairs can only be pushed to the active firewall. C. Content updates for firewall A/A HA pairs need...
Which three dynamic routing protocols are supported by the NGFW Virtual Router for this purpose?
A network administrator is required to use a dynamic routing protocol for network connectivity. Which three dynamic routing protocols are supported by the NGFW Virtual Router for this purpose? (Choose three.)A . RIP B. OSPF C. IS-IS D. EIGRP E. BGPView AnswerAnswer: ABE
What is the most appropriate NAT policy to achieve this?
An administrator wants to create a NAT policy to allow multiple source IP addresses to be translated to the same public IP address. What is the most appropriate NAT policy to achieve this?A . Dynamic IP and Port B. Dynamic IP C. Static IP D. DestinationView AnswerAnswer: A Explanation: Dynamic...
Which option describes the "PCNSA Admin" login capabilities after the outage?
The Administrator profile "PCNSA Admin" is configured with an Authentication profile "Authentication Sequence PCNSA". The Authentication Sequence PCNSA has a profile list with four Authentication profiles: Auth Profile LDAP Auth Profile Radius Auth Profile Local Auth Profile TACACS After a network outage, the LDAP server is no longer reachable. The...
Actions can be set for which two items in a URL filtering security profile? (Choose two.)
Actions can be set for which two items in a URL filtering security profile? (Choose two.)A . Block List B. Custom URL Categories C. PAN-DB URL Categories D. Allow ListView AnswerAnswer: BC Explanation: Action can be set to following three categories: -Custom URL categories -External dynamic Lists -Pan-DB predefined URL...
In order to fulfill the corporate requirement to backup the configuration of Panorama and the Panorama-managed firewalls securely, which protocol should you select when adding a new scheduled config export?
In order to fulfill the corporate requirement to backup the configuration of Panorama and the Panorama-managed firewalls securely, which protocol should you select when adding a new scheduled config export?A . HTTPS B. SMB v3 C. SCP D. FTPView AnswerAnswer: C
What are two ways to resolve this issue for a proper response?
A website is unexpectedly allowed due to miscategorization. What are two ways to resolve this issue for a proper response? (Choose two.)A . Create a URL category and assign the affected URL. Update the active URL Filtering profile site access setting for the custom URL category to block. B. Review...
