Topic 1 Question 201 to 220

Which value in the Application column indicates UDP traffic that did not match an App-ID signature?

• unknown-udp

• unknown-ip

• incomplete

• not-applicable

Answer explanation

Answer: unknown-udp

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clc6CAC

What are three valid qualifiers for a Decryption Policy Rule match? (Choose three.)

• App-ID

• Custom URL Category

• User-ID

• Destination Zone

• Source Interface

An administrator needs to gather information about the CPU utilization on both the management plane and the data plane.
Where does the administrator view the desired data?

• Resources Widget on the Dashboard

• Monitor > Utilization

• Support > Resources

• Application Command and Control Center

Which CLI command displays the physical media that are connected to ethernet1/8?

• > show system state filter-pretty sys.s1.p8.stats

• > show system state filter-pretty sys.s1.p8.med

• > show interface ethernet1/8

• > show system state filter-pretty sys.s1.p8.phy

A variable name must start with which symbol?

• $

• !

• #

• &

Answer explanation

answer: $

Reference:
https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/manage-firewalls/manage-templates-and-template-stacks/configure-template-or- template-stack-variables.html

Given the following configuration, which route is used for destination 10.10.0.4? set network virtual-router 2 routing-table ip static-route "Route 1" nexthop ip-address 192.168.1.2 set network virtual-router 2 routing-table ip static-route "Route 1" metric 30 set network virtual-router 2 routing-table ip static-route "Route 1" destination 10.10.0.0/24 set network virtual-router 2 routing-table ip static-route "Route 1" re route-table unicast set network virtual-router 2 routing-table ip static-route "Route 2" nexthop ip-address 192.168.1.2 set network virtual-router 2 routing-table ip static-route "Route 2" metric 20 set network virtual-router 2 routing-table ip static-route "Route 2" destination 10.10.0.0/24 set network virtual-router 2 routing-table ip static-route "Route 2" route-table unicast set network virtual-router 2 routing-table ip static-route "Route 3" nexthop ip-address 10.10.20.1 set network virtual-router 2 routing-table ip static-route "Route 3" metric 5 set network virtual-router 2 routing-table ip static-route "Route 3" destination 0.0.0.0/0 set network virtual-router 2 routing-table ip static-route "Route 3" route-table unicast set network virtual-router 2 routing-table ip static-route "Route 4" nexthop ip-address 192.168.1.2 set network virtual-router 2 routing-table ip static-route "Route 4" metric 10 set network virtual-router 2 routing-table ip static-route "Route 4" destination 10.10.1.0/25 set network virtual-router 2 routing-table ip static-route "Route 4" route-table unicast

• Route 1

• Route 3

• Route 2

• Route 4

In SSL Forward Proxy decryption, which two certificates can be used for certificate signing? (Choose two.)

• self-signed CA certificate

• server certificate

• wildcard server certificate

• client certificate

• enterprise CA certificate

An administrator plans to deploy 15 firewalls to act as GlobalProtect gateways around the world. Panorama will manage the firewalls.
The firewalls will provide access to mobile users and act as edge locations to on-premises infrastructure. The administrator wants to scale the configuration out quickly and wants all of the firewalls to use the same template configuration.
Which two solutions can the administrator use to scale this configuration? (Choose two.)

• virtual systems

• template stacks

• variables

• • collector groups

  Hide Answer
  

Which three statements accurately describe Decryption Mirror? (Choose three.)

• Decryption, storage, inspection, and use of SSL traffic regulated in certain countries.

• You should consult with your corporate counsel before activating and using Decryption Mirror in a production environment.

• Decryption Mirror requires a tap interface on the firewall.

• Only management consent is required to use the Decryption Mirror future.

• Use of Decryption Mirror might enable malicious users with administrative access to the firewall to harvest sensitive information that is submitted via an encrypted channel.

As a best practice, which URL category should you target first for SSL decryption?

• Health and Medicine

• High Risk

• Online Storage and Backup

• Financial Services