What must be configured before setting up Credential Phishing Prevention?

A Security Profile can block or allow traffic at which point?

Which link in the web interface enables a security administrator to view the security policy rules that match new application signatures?

Which Security profile would you apply to identify infected hosts on the protected network using DNS traffic?

Which plane on a Palo Alto Networks Firewall provides configuration, logging, and reporting functions on a separate processor?

A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base. On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.

Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

How many zones can an interface be assigned with a Palo Alto Networks firewall?

Which option shows the attributes that are selectable when setting up application filters?

Actions can be set for which two items in a URL filtering security profile? (Choose two.)

Which two statements are correct about App-ID content updates? (Choose two.)

An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Which statement is true regarding a Best Practice Assessment?

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic ____________.

When creating a Source NAT policy, which entry in the Translated Packet tab will display the options Dynamic IP and Port, Dynamic, Static IP, and None?

Which interface does not require a MAC or IP address?

A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

Recently changes were made to the firewall to optimize the policies and the security team wants to see if those changes are helping. What is the quickest way to reset the hit counter to zero in all the security policy rules?

Which two App-ID applications will you need to allow in your Security policy to use facebook-chat? (Choose two.)

Which User-ID agent would be appropriate in a network with multiple WAN links, limited network bandwidth, and limited firewall management plane resources?

Your company requires positive username attribution of every IP address used by wireless devices to support a new compliance requirement. You must collect IP-to-user mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves. The wireless devices are from various manufactures. Given the scenario, choose the option for sending IP-to-user mappings to the NGFW.

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command- and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall's signature database has been updated? (Choose two.)

At which stage of the Cyber-Attack Lifecycle would the attacker attach an infected PDF file to an email?

Identify the correct order to configure the PAN-OS integrated USER-ID agent.

1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

2. define the address of the servers to be monitored on the firewall

3. add the service account to monitor the server(s)

4. commit the configuration, and verify agent connection status

Which URL Filtering profile action would you set to allow users the option to access a site only if they provide a URL admin password?

Based on the security policy rules shown, ssh will be allowed on which port?

Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?

An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

Given the topology, which zone type should zone A and zone B to be configured with?

To use Active Directory to authenticate administrators, which server profile is required in the authentication profile?

Which interface type is used to monitor traffic and cannot be used to perform traffic shaping?

Which administrator type provides more granular options to determine what the administrator can view and modify when creating an administrator account?

Which administrator type utilizes predefined roles for a local administrator account?

Which two security profile types can be attached to a security policy? (Choose two.)

The CFO found a USB drive in the parking lot and decide to plug it into their corporate laptop. The USB drive had malware on it that loaded onto their computer and then contacted a known command and control (CnC) server, which ordered the infected machine to begin Exfiltrating data from the laptop.

Which security profile feature could have been used to prevent the communication with the CnC server?

Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

Which three statements describe the operation of Security policy rules and Security Profiles? (Choose three.)

Given the image, which two options are true about the Security policy rules. (Choose two.)

Which type of Security policy rule would match traffic flowing between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by inspecting traffic deployed as internet gateways?

Which two statements are correct regarding multiple static default routes when they are configured as shown in the image? (Choose two.)

Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can run malicious code against a targeted machine.

Which file is used to save the running configuration with a Palo Alto Networks firewall?

In the example security policy shown, which two websites would be blocked? (Choose two.)

Which Palo Alto Networks component provides consolidated policy creation and centralized management?

Which statement is true regarding a Prevention Posture Assessment?

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server.

Which security profile components will detect and prevent this threat after the firewall's signature database has been updated?

Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?

Which administrative management services can be configured to access a management interface?

How often does WildFire release dynamic updates?

What is the minimum frequency for which you can configure the firewall to check for new WildFire antivirus signatures?

Your company has 10 Active Directory domain controllers spread across multiple WAN links. All users authenticate to Active Directory. Each link has substantial network bandwidth to support all mission-critical applications. The firewall's management plane is highly utilized.

Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

What must you configure to enable the firewall to access multiple Authentication Profiles to authenticate a non-local account?

Which DNS Query action is recommended for traffic that is allowed by Security policy and matches Palo Alto Networks Content DNS Signatures?

Which interface type uses virtual routers and routing protocols?

Which URL Filtering Profile action does not generate a log entry when a user attempts to access a URL?

Which path in PAN-OS displays the list of port-based security policy rules?

Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management plane is only slightly utilized.

Which User-ID agent is sufficient in your network?

Which path in PAN-OS displays the list of port-based security policy rules?

Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

Which path is used to save and load a configuration with a Palo Alto Networks firewall?

Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

How do you reset the hit count on a Security policy rule?

Given the topology, which zone type should you configure for firewall interface E1/1?

Which dynamic update type includes updated anti-spyware signatures?

Which security policy rule would be needed to match traffic that passes between the Outside zone and Inside zone, but does not match traffic that passes within the zones?

How are Application Filters or Application Groups used in firewall policy?

Which data flow direction is protected in a zero-trust firewall deployment that is not protected in a perimeter-only firewall deployment?

What is an advantage for using application tags?

Which license is required to use the Palo Alto Networks built-in IP address EDLs?

You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common application Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

Which plane on a Palo alto networks firewall provides configuration logging and reporting functions on a separate processor?

Which protocol used to map username to user groups when user-ID is configured?

Given the image, which two options are true about the Security policy rules. (Choose two.)

The Palo Alto Networks NGFW was configured with a single virtual router named VR-1 What changes are required on VR-1 to route traffic between two interfaces on the NGFW?

During the packet flow process, which two processes are performed in application identification? (Choose two.)

Which license is required to use the Palo Alto Networks built-in IP address EDLs?

An administrator wants to prevent access to media content websites that are risky Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two)

In path monitoring, what is used to monitor remote network devices?

What are three methods of mapping usernames to IP addresses?

What are two predefined Anti­Spyware profiles? (Choose two.) 

Which type of profile must be applied to the Security policy rule to protect against buffer overflows illegal code execution and other attempts to exploit system flaws?

A Decryption policy rule allows administrators to:

Which operations are allowed when working with App-ID application tags?

Which Security profile can you apply to protect against malware such as worms and Trojans?

Which three user authentication services can be modified to provide the Palo Alto Networks NGFW with both usernames and role names? (Choose three.)

Which action results in the firewall blocking network traffic without notifying the sender?

An administrator has configured a Security policy where the matching condition includes a single application and the action is deny.

If the application's default deny action is reset-both what action does the firewall take?

An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs.

What is the correct process to enable this logging?

Which statement is true about Panorama managed devices? 

Which two settings allow you to restrict access to the management interface? (Choose two)  

Which User-ID mapping method should be used for an environment with users that do not authenticate to Active Directory? 

Which three types of authentication services can be used to authenticate user traffic flowing through the firewalls data plane? (Choose three) 

You receive notification about new malware that is being used to attack hosts. The malware exploits a software bug in common application.

Which Security Profile detects and blocks access to this threat after you update the firewall's threat signature database?

Which definition describes the guiding principle of the zero-trust architecture?

Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two.)