- All Exams Instant Download
Which VPN configuration would adapt to changes when deployed to Hie future site?
A Company needs to preconfigured firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers. Which VPN configuration would adapt to changes when deployed to Hie...
Which configuration will enable this HA scenario?
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair. Which configuration will enable this HA scenario? A. The firewall do not use floating IPs in...
Which profile is the cause of the missing policies tab?
An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?A . WebUI B. Admin Role C. Authorization D. AuthenticationView AnswerAnswer: B
Which method will dynamically register tags on the Palo Alto Networks NGFW?
Which method will dynamically register tags on the Palo Alto Networks NGFW?A . Restful API or the VMware API on the firewall or on theUser.-D agent or the ready -only domain controller B. XML API or the VMware API on the firewall on the User-ID agent or the CLI C....
What will be the egress interface if the traffic’s ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.
What will be the egress interface if the traffic’s ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the. A . ethernet 1/6 B. ethernet 1/5 C. ethernet 1/3 D. ethernet 1/7View AnswerAnswer: C
What does "incomplete" mean?
A session in the Traffic log is reporting the application as "incomplete” What does "incomplete" mean?A . The three-way TCP handshake did notcomplete. B. Data was received but wan instantly discarded because of a Deny policy was applied before App ID could be applied. C. The three-way TCP handshake was...
If an administrator wants to decrypt SMTP traffic and possesses the saver’s certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?
If an administrator wants to decrypt SMTP traffic and possesses the saver’s certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?A . TLS Bidirectional Inspection B. SSL Inbound Inspection C. SSH Forward now proxy D. SMTP inbound DecryptionView AnswerAnswer: C
How would an administrator configure the interface to IGbps?
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect. How would an administrator configure the interface to IGbps?A . set deviceconfig system speed-duplex 10Gbps-full-duplex B. set deviceconfig interface speed-duplex 1Gbs--full-duplex C. set deviceconfig interface speed-duplex 1Gbs--half-duplex D. set deviceconfig system speed-duplex 1Gbs--half-duplex.View...
Which application should be used to identify traffic traversing the NGFW?
An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. THE update contains application that matches the same traffic signatures as the customer application. Which application should be used to identify traffic traversing the NGFW?A . custom...
When is the content inspection performed in the packet flow process?
When is the content inspection performed in the packet flow process?A . after the SSL Proxy re-encrypts the packet B. before the packet forwarding process C. after the application has been identified D. before session lookupView AnswerAnswer: C
