Topic 1 Question 521 to 540

After importing a pre-configured firewall configuration to Panorama, what step is required to ensure a commit/push is successful without duplicating local configurations?

• Ensure Force Template Values is checked when pushing configuration.

• Push the Template first, then push Device Group to the newly managed firewall.

• Push the Device Group first, then push Template to the newly managed firewall.

• Perform the Export or push Device Config Bundle to the newly managed firewall

Which new PAN-OS 11.0 feature supports IPv6 traffic?

• OSPF

• IKEv1

• DHCP Server

• DHCPv6 Client with Prefix Delegation

a URL is in multiple custom URL categories with different actions, which action will take priority?

• Block

• Allow

• Alert

• Override

An engineer is reviewing the following high availability (HA) settings to understand a recent HA failover event

Which timer determines the frequency between packets sent to verify that the HA functionality on the other HA firewall is operational?

• Hello Interval

• Monitor Fail Hold Up Time

• Heartbeat Interval

• Promotion Hold Time

Which three items must be configured to implement application override? (Choose three.)

• • Application filter

• Application override policy rule

• Custom app

• Decryption policy rule

• Security policy rule

An engineer is configuring a firewall with three interfaces:

• MGT connects to a switch with internet access.
• Ethernet1/1 connects to an edge router.
• Ethernet1/2 connects to a virtualization network.

The engineer needs to configure dynamic updates to use a dataplane interface for internet traffic.
What should be configured in Setup > Services > Service Route Configuration to allow this traffic?

• Set DNS and Palo Alto Networks Services to use the MGT source interface.

• Set DNS and Palo Alto Networks Services to use the ethernet1/1 source interface.

• Set DNS and Palo Alto Networks Services to use the ethernet1/2 source interface.

• Set DDNS and Palo Alto Networks Services to use the MGT source interface.

An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.

What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)

• No client configuration is required for explicit proxy, which simplifies the deployment complexity.

• Explicit proxy supports interception of traffic using non-standard HTTPS ports.

• It supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request

• Explicit proxy allows for easier troubleshooting, since the client browser is aware of the existence of the proxy.

Which three external authentication services can the firewall use to authenticate admins into the Palo Alto Networks NGFW without creating administrator account on the local firewall? (Choose three.)

• TACACS+

• Kerberos

• SAML

• RADIUS

• LDAP

With the default TCP and UDP settings on the firewall, what will be the identified application in the following session?

• insufficient-data

• incomplete

• not-applicable

• unknown-tcp

To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?

• Clone the security policy and add it to the other device groups.

• Add the policy to the target device group and apply a master device to the device group.

• Reference the targeted device’s templates in the target device group.

• Add the policy in the shared device group as a pre-rule.