Topic 1 Question 121 to 140

An administrator just submitted a newly found piece of spyware for WildFire analysis. The spyware passively monitors behavior without the user's knowledge.

What is the expected verdict from WildFire?

• Malware

• Grayware

• Phishing

• Spyware

Answer explanation

Anwer :Grayware

://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/wildfire-concepts/verdicts.html

When configuring the firewall for packet capture, what are the valid stage types?

• receive, management, transmit, and non-syn

• receive, management, transmit, and drop

• receive, firewall, send, and non-syn

• receive, firewall, transmit, and drop

Which operation will impact the performance of the management plane?

• DoS protection

• WildFire submissions

• generating a SaaS Application report

• decrypting SSL sessions

Which User-ID method maps IP addresses to usernames for users connecting through a web proxy that has already authenticated the user?

• syslog listening

• server monitoring

• client probing

• port mapping

The firewall determines if a packet is the first packet of a new session or if a packet is part of an existing session using which kind of match?

• 6-tuple match: Source IP Address, Destination IP Address, Source Port, Destination Port, Protocol, and Source Security Zone

• 5-tuple match: Source IP Address, Destination IP Address, Source Port, Destination Port, Protocol

• 7-tuple match: Source IP Address, Destination IP Address, Source Port, Destination Port, Source User, URL Category, and Source Security Zone

• 9-tuple match: Source IP Address, Destination IP Address, Source Port, Destination Port, Source User, Source Security Zone, Destination Security Zone, Application, and URL Category

Which GlobalProtect Client connect method requires the distribution and use of machine certificates?

• At-boot

• Pre-logon

• User-logon (Always on)

• On-demand

Which feature can provide NGFWs with User-ID mapping information?

• Web Captcha

• Native 802.1q authentication

• GlobalProtect

• Native 802.1x authentication

Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)

• Role Based

• Custom Panorama Admin

• Device Group

• Dynamic

• Template Admin

Which option enables a Palo Alto Networks NGFW administrator to schedule Application and Threat updates while applying only new content-IDs to traffic?

• Select download-and-install

• Select download-only

• Select download-and-install, with Disable new apps in content update selected

• Select disable application updates and select Install only Threat updates

Which is the maximum number of samples that can be submitted to WildFire per day, based on a WildFire subscription?

• 10,000

• 15,000

• 7,500

• 5,000