Which three user authentication services can be modified to provide the Palo Alto Networks NGFW with both usernames and role names? (Choose three.)

• TACACS+

• Kerberos

• PAP

  LDAP

• SAML

• RADIUS

What is exchanged through the HA2 link?

• hello heartbeats

• User-ID information

• session synchronization

• HA state information

Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

• Both SSH keys and SSL certificates must be generated.

• No prerequisites are required.

• SSH keys must be manually generated.

• SSL certificates must be generated.

A customer wants to combine multiple Ethernet interfaces into a single virtual interface using link aggregation.
Which two formats are correct for naming aggregate interfaces? (Choose two.)

• ae.8

• aggregate.1

• ae.1

• aggregate.8

Which three authentication factors does PAN-OSֲ® software support for MFA? (Choose three.)

• Push

• Pull

• Okta Adaptive

• Voice

• SMS

VPN traffic intended for an administrator's firewall is being maliciously intercepted and retransmitted by the interceptor.
When creating a VPN tunnel, which protection profile can be enabled to prevent this malicious behavio

• Zone Protection

• Replay

• Web Application

• DoS Protection

Which Zone Pair and Rule Type will allow a successful connection for a user on the Internet zone to a web server hosted on the DMZ zone? The web server is reachable using a Destination NAT policy in the Palo Alto Networks firewall.

• 
• 
• 
• 

An administrator has configured a QoS policy rule and a QoS Profile that limits the maximum allowable bandwidth for the YouTube application. However, YouTube is consuming more than the maximum bandwidth allotment configured.
Which configuration step needs to be configured to enable QoS?

• Enable QoS interface

• Enable QoS in the Interface Management Profile

• Enable QoS Data Filtering Profile

• Enable QoS monitor

Which log file can be used to identify SSL decryption failures?

• Traffic

• ACC

• Configuration

• Threats

A customer wants to set up a site-to-site VPN using tunnel interfaces.
Which two formats are correct for naming tunnel interfaces? (Choose two.)

• tunnel.1

• vpn-tunnel.1

• tunnel.1025

• vpn-tunnel.1024