Which of the following would be a reason to use an XML API to communicate with a Palo Alto Networks firewall?

Which of the following would be a reason to use an XML API to communicate with a Palo Alto Networks firewall?A . So that information can be pulled from other network resources for User-IDB . To allow the firewall to push UserID information to a Network Access Control (NAC) device.C...

September 23, 2019 No Comments READ MORE +

What can cause missing SSL packets when performing a packet capture on data plane interfaces?

What can cause missing SSL packets when performing a packet capture on data plane interfaces?A . There is a hardware problem with the offloading FPGA on the management plane.B . The missing packets are offloaded to the management plane CPD . The packets are hardware offloaded to the offload processor...

September 23, 2019 No Comments READ MORE +

When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answer

When setting up GlobalProtect, what is the job of the GlobalProtect Portal? Select the best answerA . To maintain the list of remote GlobalProtect Portals and list of categories for checking the client machineB . To maintain the list of GlobalProtect Gateways and list of categories for checking the client...

September 22, 2019 No Comments READ MORE +

Administrative Alarms can be enabled for which of the following except?

Administrative Alarms can be enabled for which of the following except?A . Certificate ExpirationsB . Security Violation ThresholdsC . Security Policy TagsD . Traffic Log capacityView AnswerAnswer: A

September 22, 2019 No Comments READ MORE +

In an Anti-Virus profile, changing the action to “Block” for IMAP or POP decoders will result in the following:

In an Anti-Virus profile, changing the action to “Block” for IMAP or POP decoders will result in the following:A . The connection from the server will be resetB . The Anti-virus profile will behave as if “Alert” had been specified for the actionC . The traffic will be dropped by...

September 21, 2019 No Comments READ MORE +

In order to route traffic between layer 3 interfaces on the PAN firewall you need:

In order to route traffic between layer 3 interfaces on the PAN firewall you need:A . VLANB . VwireC . Security ProfileD . Virtual RouterView AnswerAnswer: A

September 21, 2019 No Comments READ MORE +

Where in the firewall GUI can an administrator see how many sessions of web-browsing traffic have occurred in the last day?

Where in the firewall GUI can an administrator see how many sessions of web-browsing traffic have occurred in the last day?A . Monitor->Session BrowserB . Monitor->App Scope->SummaryC . Objects->Applications->web-browsingD . ACC->ApplicationView AnswerAnswer: D Explanation: Reference: http://www.newnet66.org/Support/Resources/Using-The-ACC.pdf

September 21, 2019 No Comments READ MORE +

What is the shortest time interval the company can configure their firewall to check for WildFire updates?

A company has purchased a WildFire subscription and would like to implement dynamic updates to download the most recent content as often as possible. What is the shortest time interval the company can configure their firewall to check for WildFire updates?A . Every 24 hoursB . Every 30 minutesC ....

September 20, 2019 No Comments READ MORE +

Which NAT Policy rule will allow users outside the company to access the web server?

A company hosts a publicly-accessible web server behind their Palo Alto Networks firewall, with this configuration information: Users outside the company are in the "Untrust-L3" zone. The web server physically resides in the "Trust-L3" zone. Web server public IP address: 1.1.1.1 Web server private IP address: 192.168.1.10 Which NAT Policy...

September 20, 2019 No Comments READ MORE +

In order for ping traffic to traverse this device from e1/2 to e1/1, what else needs to be configured?

Taking into account only the information in the screenshot above, answer the following question. In order for ping traffic to traverse this device from e1/2 to e1/1, what else needs to be configured? Select all that apply.A . Security policy from trust zone to Internet zone that allows pingB ....

September 20, 2019 No Comments READ MORE +