QUESTION 34
Which two types of security profiles are recommended to protect against known and unknown threats?
(Choose two)

QUESTION 35
A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?

QUESTION 36
In a multi-tenant environment, what feature allows you to assign different administrators to different tenants?

QUESTION 37
An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?

QUESTION 38
What happens when a packet from an existing session is received by a firewall that

QUESTION 39
What is the default port used by the Terminal Services agent to communicate with a firewall?

QUESTION 40
You are hosting a public-facing web server on your DMZ and access to that server is through a Palo Alto Networks firewall Both internal clients and internet clients access this web server using the FQDN public webserver acme com which resolves to the public address of 99.99 99.2 Which combination of NAT policies is necessary to enable access to the web server for both internal and internet clients?

QUESTION 41
Which feature prevents the submission of corporate login information into website forms?

QUESTION 42
A firewall that was previously connected lo a User-ID agent server now shows disconnected What is the likely cause?

QUESTION 43
Instead of disabling App-IDs regularly, a security policy rule is going to be configured to temporarily allow new App-IDs. In which two circumstances is it valid to disable App-IDs as part of content update-?
(Choose two)

QUESTION 44
View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?

QUESTION 45
Which two log types are necessary to fully investigate a network intrusion? (Choose two)

QUESTION 46
What is exchanged through the HA2 link?

QUESTION 47
Which feature prevents the submission of login information into website froms?

QUESTION 48
A customer has a pair of Panorama HA appliances tunning local log collectors and wants to have log redundancy on logs forwarded from firewalls Which two configuration options fulfill the customer’s requirement for log redundancy? (Choose two)

QUESTION 49
An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22 Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?

A)

B)

C)

D)

QUESTION 50
An organization has Palo Alto Networks MGfWs that send logs to remote monitoring and security management platforms. The network team has report has excessive traffic on the corporate WAN. How could the Palo Alto Networks NOFW administrator reduce WAN traffic while maintaining support for all the existing monitoring/security platforms?

QUESTION 51
An administrator needs to optimize traffic to prefer business-critical applications over non-critical applications.
QoS natively integrates with which feature to provide service quality?

QUESTION 52
In preparation for a cutover event, what two processes or procedures should be verified? (Choose two)

QUESTION 53
Which two methods can be configured to validate the revocation status of a certificate? (Choose two)

QUESTION 54
A customer who has a multi-tenant environment needs the administrator to be restricted lo specific objects and policies in the virtual system within its tenant How can an administrators access be restricted?

QUESTION 55
How can you enforce a security policy based on the device type?

QUESTION 56
A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

QUESTION 57
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

QUESTION 58
Which of the following is NOT a benefit of using App-ID?