Topic 1 uestion 61 to 80

Which CLI command can be used to export the tcpdump capture?

• scp export tcpdump from mgmt.pcap to < username@host:path>

• scp extract mgmt-pcap from mgmt.pcap to < username@host:path>

• scp export mgmt-pcap from mgmt.pcap to < username@host:path>

• download mgmt-pcap

An administrator has configured the Palo Alto Networks NGFW's management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW itself.
Which configuration setting or step will allow the firewall to get automatic application signature updates?

• A scheduler will need to be configured for application signatures.

• A Security policy rule will need to be configured to allow the update requests from the firewall to the update servers.

• A Threat Prevention license will need to be installed.

• A service route will need to be configured.

Which three options are supported in HA Lite?(Choose three.)

• Virtual link

• Active/passive deployment

• Synchronization of IPsec security associations

• Configuration synchronization

• Session synchronization

Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OSֲ® version, and serial number?

• debug system details

• show session info

• show system info

• show system details

Answer explanation

Answer; show system info

Reference:
https://live.paloaltonetworks.com/t5/Learning-Articles/Quick-Reference-Guide-Helpful-Commands/ta-p/56511

During the packet flow process, which two processes are performed in application identification? (Choose two.)

• Pattern based application identification

• Application override policy match

• Application changed from content inspection

• Session application identified

Which tool provides an administrator the ability to see trends in traffic over periods of time, such as threats detected in the last 30 days?

• Session Browser

• Application Command Center

• TCP Dump

• Packet Capture

The certificate information displayed in the following image is for which type of certificate?

• Forward Trust certificate

• Self-Signed Root CA certificate

• Web Server certificate

• Public CA signed certificate

Which three steps will reduce the CPU utilization on the management plane? (Choose three.)

• Disable SNMP on the management interface

• Application override of SSL application.

• Disable logging at session start in Security policies.

• Disable predefined reports

• Reduce the traffic being decrypted by the firewall.

Which feature must you configure to prevent users from accidentally submitting their corporate credentials to a phishing website?

• URL Filtering profile

• Zone Protection profile

• Anti-Spyware profile

• Vulnerability Protection profile

How can a candidate or running configuration be copied to a host external from Panorama?

• Commit a running configuration.

• Save a configuration snapshot.

• Save a candidate configuration.

• Export a named configuration snapshot.