Loading questions...
Loading questions...
Preview
Updated
View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?
Which three user authentication services can be modified to provide the Palo Alto Networks NGFW with both usernames and role names? (Choose three.)
What is exchanged through the HA2 link?
Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?
A customer wants to combine multiple Ethernet interfaces into a single virtual interface using link aggregation.
Which two formats are correct for naming aggregate interfaces? (Choose two.)
Which three authentication factors does PAN-OSֲ® software support for MFA? (Choose three.)
VPN traffic intended for an administrator's firewall is being maliciously intercepted and retransmitted by the interceptor.
When creating a VPN tunnel, which protection profile can be enabled to prevent this malicious behavior?
Which Zone Pair and Rule Type will allow a successful connection for a user on the Internet zone to a web server hosted on the DMZ zone? The web server is reachable using a Destination NAT policy in the Palo Alto Networks firewall.
A.
An administrator has configured a QoS policy rule and a QoS Profile that limits the maximum allowable bandwidth for the YouTube application. However, YouTube is consuming more than the maximum bandwidth allotment configured.
Which configuration step needs to be configured to enable QoS?
Which log file can be used to identify SSL decryption failures?
Which method will dynamically register tags on the Palo Alto Networks NGFW?
A customer wants to set up a site-to-site VPN using tunnel interfaces.
Which two formats are correct for naming tunnel interfaces? (Choose two.)
Based on the following image, what is the correct path of root, intermediate, and end-user certificate?
An administrator wants a new Palo Alto Networks NGFW to obtain automatic application updates daily, so it is configured to use a scheduler for the application database. Unfortunately, they required the management network to be isolated so that it cannot reach the Internet.
Which configuration will enable the firewall to download and install application updates automatically?
A company wants to install a NGFW firewall between two core switches on a VLAN trunk link. They need to assign each VLAN to its own zone and to assign untagged (native) traffic to its own zone.
Which option differentiates multiple VLANs into separate zones?
Which data flow describes redistribution of user mappings?
Where can an administrator see both the management plane and data plane CPU utilization in the WebUI?
Which four NGFW multi-factor authentication factors are supported by PAN-OSֲ®? (Choose four.)
Which two features does PAN-OSֲ® software use to identify applications? (Choose two.)
An administrator wants to upgrade a firewall from PAN-OSֲ® 9.1 to PAN-OSֲ® 10.0. The firewall is not a part of an HA pair.
What needs to be updated first?
When backing up and saving configuration files, what is achieved using only the firewall and is not available in Panorama?
How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?
Which two settings can be configured only locally on the firewall and not pushed from a Panorama template or template stack? (Choose two.)
Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic?
If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is pushed?
B.
C.
D.
