Topic 1 question 141 to160

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)

• dll

• exe

• fon

• apk

• pdf

  jar

An administrator has been asked to configure active/active HA for a pair of firewalls. The firewalls use Layer 3 interfaces to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?

• The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.

• Each firewall will have a separate floating IP, and priority will determine which firewall has the primary IP.

• The firewalls do not use floating IPs in active/active HA.

• The firewalls will share the same interface IP address, and device 1 will use the floating IP if device 0 fails

Which version of GlobalProtect supports split tunneling based on destination domain, client process, and HTTP/HTTPS video streaming application?

• GlobalProtect version 4.0 with PAN-OS 8.1

• GlobalProtect version 4.1 with PAN-OS 8.1

• GlobalProtect version 4.1 with PAN-OS 8.0

• GlobalProtect version 4.0 with PAN-OS 8.0

How does Panorama prompt VMWare NSX to quarantine an infected VM?

• HTTP Server Profile

• Syslog Server Profile

• Email Server Profile

• SNMP Server Profile

An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.)

• 
• 
• 
• 

Which two actions would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL Forward Proxy? (Choose two.)

• Create a no-decrypt Decryption Policy rule.

• Configure a Dynamic Address Group for untrusted sites.

• Create a Security Policy rule with a vulnerability Security Profile attached.

• Enable the Block sessions with untrusted issuers setting

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?

• Enable and configure the Packet Buffer Protection thresholds. Enable Packet Buffer Protection per ingress zone.

• Enable and then configure Packet Buffer thresholds. Enable Interface Buffer protection.

• Create and Apply Zone Protection Profiles in all ingress zones. Enable Packet Buffer Protection per ingress zone.

• Configure and apply Zone Protection Profiles for all egress zones. Enable Packet Buffer Protection per egress zone.

• Enable per-vsys Session Threshold alerts and triggers for Packet Buffer Limits. Enable Zone Buffer Protection per zone

What is the purpose of the firewall decryption broker

• decrypt SSL traffic and then send it as cleartext to a security chain of inspection tools.

• force decryption of previously unknown cipher suites

• reduce SSL traffic to a weaker cipher before sending it to a security chain of inspection tools.

• inspect traffic within IPsec tunnels

SAML SLO is supported for which two firewall features? (Choose two.)

• GlobalProtect Portal

• CaptivePortal

• WebUI

• CLI

What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

• Rule Usage Hit counter will not be reset.

• Highlight Unused Rules will highlight all rules.

• Highlight Unused Rules will highlight zero rules.

• Rule Usage Hit counter will reset.