When setting up a security profile which three items can you use? (Choose three)

When setting up a security profile which three items can you use? (Choose three)A . Wildfire analysisB . anti-ransom wareC . antivirusD . URL filteringE . decryption profileView AnswerAnswer: A,C,D Explanation: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles

September 23, 2021 No Comments READ MORE +

Which menu item enables a firewall administrator to see details about traffic that is currently active through the NGFW?

Which menu item enables a firewall administrator to see details about traffic that is currently active through the NGFW?A . App ScopeB . ACCC . Session BrowserD . System LogsView AnswerAnswer: C

September 23, 2021 No Comments READ MORE +

Which two statements are correct regarding the bootstrap package contents?

An organization is building a Bootstrap Package to deploy Palo Alto Networks VM-Series firewalls into their AWS tenant. Which two statements are correct regarding the bootstrap package contents? (Choose two)A . The /config /content and /software folders are mandatory while the /license and /plugin folders are optionalB . The bootstrap...

September 23, 2021 No Comments READ MORE +

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?A . Deny application facebook-chat before allowing application facebookB . Deny application facebook on topC . Allow application facebook on topD . Allow application facebook before denying application facebook-chatView AnswerAnswer: A Explanation: Reference: https://live.paloaltonetworks.com/t5/Configuration-Articles/Failed-to-Block-Facebook-Chat-Consistently/ta-p/115673

September 22, 2021 No Comments READ MORE +

Which interface type would support this business requirement?

An administrator needs to implement an NGFW between their DMZ and Core network EIGRP Routing between the two environments is required. Which interface type would support this business requirement?A . Layer 3 interfaces but configuring EIGRP on the attached virtual routerB . Virtual Wire interfaces to permit EIGRP routing to...

September 22, 2021 No Comments READ MORE +

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)A . Verify AutoFocus status using CLC . Check the WebUI Dashboard AutoFocus widget.D . Check for WildFire forwarding logs.E . Check the licenseF . Verify AutoFocus is enabled below Device Management tab.View AnswerAnswer: D,E Explanation: Reference:...

September 22, 2021 No Comments READ MORE +

Which processing order will be enabled when a Panorama administrator selects the setting “Objects defined in ancestors will take higher precedence?”

Which processing order will be enabled when a Panorama administrator selects the setting “Objects defined in ancestors will take higher precedence?”A . Descendant objects will take precedence over other descendant objects.B . Descendant objects will take precedence over ancestor objects.C . Ancestor objects will have precedence over descendant objects.D ....

September 22, 2021 No Comments READ MORE +

Which configuration task is best for reducing load on the management plane?

Which configuration task is best for reducing load on the management plane?A . Disable logging on the default deny ruleB . Enable session logging at startC . Disable pre-defined reportsD . Set the URL filtering action to send alertsView AnswerAnswer: A

September 22, 2021 No Comments READ MORE +

When an in-band data port is set up to provide access to required services, what is required for an interface that is assigned to service routes?

When an in-band data port is set up to provide access to required services, what is required for an interface that is assigned to service routes?A . The interface must be used for traffic to the required servicesB . You must enable DoS and zone protectionC . You must set...

September 22, 2021 2 Comments READ MORE +

Which two configurations should you check on the firewall'?

A firewall should be advertising the static route 10 2 0 0/24 into OSPF. The configuration on the neighbor is correct but the route is not in the neighbor's routing table Which two configurations should you check on the firewall'? (Choose two)A . Within the redistribution profile ensure that Redist...

September 21, 2021 No Comments READ MORE +