PANWCOE

What action will inform end users when their access to Internet content is being restricted?

• Ensure that the 'site access" setting for all URL sites is set to 'alert'.

• Create a custom 'URL Category' object with notifications enabled.

• Enable 'Response Pages' on the interface providing Internet access.

• Publish monitoring data for Security policy deny logs.

What must be configured before setting up Credential Phishing Prevention?

• Anti Phishing Block Page

• Threat Prevention

• Anti Phishing profiles

• User-ID

Answer explanation

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/threat-prevention/prevent-credential-phishing/set-up-credential-phishing-prevention

A Security Profile can block or allow traffic at which point?

• after it is matched to a Security policy rule that allows or blocks traffic

• on either the data plane or the management plane

• after it is matched to a Security policy rule that allows traffic

• before it is matched to a Security policy rule

Which link in the web interface enables a security administrator to view the security policy rules that match new application signatures?

• Pre-analyze

• Review Policies

• Review App Matches

• Review Apps

Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?

• anti-spyware

• URL traffic

• vulnerability protection

• antivirus

Answer explanation

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles

Which plane on a Palo Alto Networks Firewall provides configuration, logging, and reporting functions on a separate processor?

• network processing

• data

• management

• security processing

A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.

Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

• All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application

• No impact because the apps were automatically downloaded and installed

• No impact because the firewall automatically adds the rules to the App-ID interface

• All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

How many zones can an interface be assigned with a Palo Alto Networks firewall?

• two

• three

• one

• four

Answer explanation

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/network/network-zones/security-zone-overview

Which option shows the attributes that are selectable when setting up application filters?

• Category, Subcategory, Technology, and Characteristic

• Name, Category, Technology, Risk, and Characteristic

• Category, Subcategory, Technology, Risk, and Characteristic

• Category, Subcategory, Risk, Standard Ports, and Technology

Answer explanation

https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-web-interface-help/objects/objects-application-filters

Actions can be set for which two items in a URL filtering security profile? (Choose two.)

• Custom URL Categories

• Block List

• Allow List

• PAN-DB URL Categories