- All Exams Instant Download
Which configuration setting or step will allow the firewall to get automatic application signature updates?
An administrator has configured the Palo Alto Networks NGFW’s management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW itself. Which configuration setting or step will allow the firewall to get automatic application signature updates?A . A scheduler will need to...
Decrypted packets from the website https://www.microsoft.com will appear as which application and service within the Traffic log?
Decrypted packets from the website https://www.microsoft.com will appear as which application and service within the Traffic log?A . web-browsing and 443B . SSL and 80C . SSL and 443D . web-browsing and 80View AnswerAnswer: A
What must the administrator configure so that the PAN-OS® software can be upgraded?
An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OS® software. The firewall has internet connectivity through an Ethernet interface, but no internet connectivity from the management interface. The Security policy has the default security rules and a rule that allows all web-browsing...
Which protection feature is available only in a Zone Protection Profile?
Which protection feature is available only in a Zone Protection Profile?A . SYN Flood Protection using SYN Flood CookiesB . ICMP Flood ProtectionC . Port Scan ProtectionD . UDP Flood ProtectionsView AnswerAnswer: A
Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)
Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)A . CRLB . CRTC . OCSPD . Cert-Validation-ProfileE . SSL/TLS Service ProfileView AnswerAnswer: A,C
Which item enables a firewall administrator to see details about traffic that is currently active through the NGFW?
Which item enables a firewall administrator to see details about traffic that is currently active through the NGFW?A . ACCB . System LogsC . App ScopeD . Session BrowserView AnswerAnswer: D
How can the firewall be configured automatically disable the PBF rule if the next hop goes down?
A user’s traffic traversing a Palo Alto Networks NGFW sometimes can reach http://www.company.com. At other times the session times out. The NGFW has been configured with a PBF rule that the user’s traffic matches when it goes to http://www.company.com. How can the firewall be configured automatically disable the PBF rule...
Which configuration change should the administrator make?
An administrator needs to determine why users on the trust zone cannot reach certain websites. The only information available is shown on the following image. Which configuration change should the administrator make? A) B) C) D) E) A . Option AB . Option BC . Option CD . Option DE...
Based, on the image, what most likely is wrong?
The firewall is not downloading IP addresses from MineMeld. Based, on the image, what most likely is wrong?A . A Certificate Profile that contains the client certificate needs to be selected.B . The source address supports only files hosted with an ftp://<address/file>.C . External Dynamic Lists do not support SSL...
Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)
Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)A . dllB . exeC . srcD . apkE . pdfF . jarView AnswerAnswer: DEF Explanation: Reference: https://www.paloaltonetworks.com/documentation/80/wildfire/wf_admin/wildfire-overview/wildfire-file-type-support
