- All Exams Instant Download
Which priority is correct for the passive firewall?
An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall. Which priority is correct for the passive firewall?A . 0B . 99C . 1D . 255View AnswerAnswer: D Explanation: Reference: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/framemaker/71/pan-os/pan-os/section_5.pdf (page 9)
Which option will protect the individual servers?
A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers. Which option will protect the individual servers?A . Enable packet buffer protection on the Zone Protection Profile.B . Apply an Anti-Spyware Profile with DNS sinkholing.C . Use the DNS App-ID with application-default.D . Apply a...
Which two features does PAN-OS® software use to identify applications? (Choose two)
Which two features does PAN-OS® software use to identify applications? (Choose two)A . port numberB . session numberC . transaction characteristicsD . application layer payloadView AnswerAnswer: A,D Explanation: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/app-id/application-level-gateways#
Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OS® version, and serial number?
Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OS® version, and serial number?A . debug system detailsB . show session infoC . show system infoD . show system detailsView AnswerAnswer: C Explanation: Reference: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/technical-documentation/pan-os-60/PAN-OS-6.0- CLI-ref.pdf
SAML SLO is supported for which two firewall features? (Choose two.)
SAML SLO is supported for which two firewall features? (Choose two.)A . GlobalProtect PortalB . CaptivePortalC . WebUID . CLIView AnswerAnswer: A,B
A session in the Traffic log is reporting the application as “incomplete.” What does “incomplete” mean?
A session in the Traffic log is reporting the application as “incomplete.” What does “incomplete” mean?A . The three-way TCP handshake was observed, but the application could not be identified.B . The three-way TCP handshake did not complete.C . The traffic is coming across UDP, and the application could not...
Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)
Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)A . .dllB . .exeC . .srcD . .apkE . .pdfF . .jarView AnswerAnswer: D,E,F Explanation: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/getting-started/enable-basic-wildfire-forwarding
If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is pushed?
If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is pushed?A . The settings assigned to the template that is on top of the stack.B . The administrator will be...
Updates to dynamic user group membership are automatic therefore using dynamic user groups instead of static group objects allows you to:
Updates to dynamic user group membership are automatic therefore using dynamic user groups instead of static group objects allows you to:A . respond to changes in user behavior or potential threats using manual policy changesB . respond to changes in user behavior or potential threats without automatic policy changesC ....
Which three authentication factors does PAN-OS® software support for MFA (Choose three.)
Which three authentication factors does PAN-OS® software support for MFA (Choose three.)A . PushB . PullC . Okta AdaptiveD . VoiceE . SMSView AnswerAnswer: A,D,E Explanation: Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure-multi-factor-authentication
