BOLA2

What key capability distinguishes Content-ID technology from conventional network security approaches?

• It performs packet header analysis short of deep packet inspection.

• It provides single-pass application layer inspection for real-time threat prevention.

• It exclusively monitors network traffic volumes.

• It relies primarily on reputation-based filtering.

In a distributed enterprise implementing Prisma SD-WAN, which configuration element should be implemented first to ensure optimal traffic flow between remote sites and headquarters?

• Deploy redundant ION devices at each location.

• Implement dynamic path selection using real-time performance metrics.

• Configure static routes between all the branch offices.

• Enable split tunneling for all branch locations.

Which two components of a Security policy, when configured, allow third-party contractors access to internal applications outside business hours? (Choose two.)

• App-ID

• Service

• User-ID

• Schedule

A company has an ongoing initiative to monitor and control IT-sanctioned SaaS applications. To be successful, it will require configuration of decryption policies, along with data filtering and URL Filtering Profiles used in Security policies. Based on the need to decrypt SaaS applications, which two steps are appropriate to ensure success? (Choose two.)

• Configure SSL Forward Proxy.

• Validate which certificates will be used to establish trust.

• Configure SSL Inbound Inspection.

• Create new self-signed certificates to use for decryption.

A network security engineer wants to forward Strata Logging Service data to tools used by the Security Operations Center (SOC) for further investigation. In which best practice step of Palo Alto Networks Zero Trust does this fit?

• Map and Verify Transactions

• Implementation

• Standards and Designs

• Report and Maintenance

A network engineer pushes specific Panorama reports of new AI URL category types to branch NGFWs. Which two report types achieve this goal? (Choose two.)

• SNMP

• Custom

• PDF summary

• CSV export

Which subscription sends non-file format-based traffic that matches Data Filtering Profile criteria to a cloud service to render a verdict?

• Enterprise DLP

• Advanced URL Filtering

• SaaS Security Inline

• Advanced WildFire

How are policies evaluated in the AWS management console when creating a Security policy for a Cloud NGFW?

• The administrator sets a rule order to determine the order in which they are evaluated.

• They can be dragged up or down the stack as they are evaluated.

• The administrator sets a rule priority to determine the order in which they are evaluated.

• They must be created in the order they are intended to be evaluated.

During a security incident investigation, which Security profile will have logs of attempted confidential data exfiltration?

• File Blocking Profile

• Enterprise DLP Profile

• Vulnerability Protection Profile

• WildFire Analysis Profile

Which set of attributes is used by IoT Security to identify and classify appliances on a network when determining Device-ID?

• IP address, network traffic patterns, and device type

• MAC address, device manufacturer, and operating system

• Hostname, application usage, and encryption method

• Device model, firmware version, and user credential