An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OSֲ® software. The firewall has internet connectivity through an Ethernet interface, but no internet connectivity from the management interface. The Security policy has the default security rules and a rule that allows all web- browsing traffic from any to any zone.
What must the administrator configure so that the PAN-OSֲ® software can be upgraded?

Which feature prevents the submission of corporate login information into website forms?

Which option is part of the content inspection process?

In a virtual router, which object contains all potential routes?

An administrator creates an SSL decryption rule decrypting traffic on all ports. The administrator also creates a Security policy rule allowing only the applications
DNS, SSL, and web-browsing.
The administrator generates three encrypted BitTorrent connections and checks the Traffic logs. There are three entries. The first entry shows traffic dropped as application Unknown. The next two entries show traffic allowed as application SSL.
Which action will stop the second and subsequent encrypted BitTorrent connections from being allowed as SSL?

Which certificates can be used as a Forward Trust certificate?

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

Which menu item enables a firewall administrator to see details about traffic that is currently active through the NGFW?

Which protection feature is available only in a Zone Protection Profile?

Which CLI command can be used to export the tcpdump capture?

An administrator has configured the Palo Alto Networks NGFW's management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW itself.
Which configuration setting or step will allow the firewall to get automatic application signature updates?

Which three options are supported in HA Lite? (Choose three.)

Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OSֲ® version, and serial number?

During the packet flow process, which two processes are performed in application identification? (Choose two.)

Which tool provides an administrator the ability to see trends in traffic over periods of time, such as threats detected in the last 30 days?

The certificate information displayed in the following image is for which type of certificate?

Which three steps will reduce the CPU utilization on the management plane? (Choose three.)

Which feature must you configure to prevent users from accidentally submitting their corporate credentials to a phishing website?

How can a candidate or running configuration be copied to a host external from Panorama?

If an administrator does not possess a website's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic when users browse to HTTP(S) websites?

An administrator sees several inbound sessions identified as unknown-tcp in the Traffic logs. The administrator determines that these sessions are form external users accessing the company's proprietary accounting application. The administrator wants to reliably identify this traffic as their accounting application and to scan this traffic for threats.
Which option would achieve this result?

The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.
Which two options would help the administrator troubleshoot this issue? (Choose two.)

An administrator has enabled OSPF on a virtual router on the NGFW. OSPF is not adding new routes to the virtual router.
Which two options enable the administrator to troubleshoot this issue? (Choose two.)

Which three firewall states are valid? (Choose three.)

Which virtual router feature determines if a specific destination IP address is reachable?

An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance.
Which interface type and license feature are necessary to meet the requirement?

When is the content inspection performed in the packet flow process?

An administrator has created an SSL Decryption policy rule that decrypts SSL sessions on any port.
Which log entry can the administrator use to verify that sessions are being decrypted?

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an internal system.
Which Security Profile type will prevent this attack?

Which processing order will be enabled when a Panorama administrator selects the setting Objects defined in ancestors will take higher precedence?

An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors.
How would the administrator establish the chain of trust?

What will be the egress interface if the traffic's ingress interface is ethernet1/6 sourcing from 192.168.111.3 and to the destination 10.46.41.113 during the time shown in the image?

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server hosts its contents over HTTP(S). Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules, needs to be configured to allow cleartext web-browsing traffic to this server on tcp/443?

Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server.
Which solution in PAN-OSֲ® software would help in this case?

An administrator has been asked to create 100 virtual firewalls in a local, on-premise lab environment (not in ג€the cloudג€). Bootstrapping is the most expedient way to perform this task.
Which option describes deployment of a bootstrap package in an on-premise virtual environment?

Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?

Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a No Decrypt action? (Choose two.)

Which feature can be configured on VM-Series firewalls?

In High Availability, which information is transferred via the HA data link?

The firewall identifies a popular application as an unknown-tcp.
Which two options are available to identify the application? (Choose two.)

If an administrator wants to decrypt SMTP traffic and possesses the server's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)

Which CLI command enables an administrator to check the CPU utilization of the dataplane?

Which DoS protection mechanism detects and prevents session exhaustion attacks?

Which two subscriptions are available when configuring Panorama to push dynamic updates to connected devices? (Choose two.)

View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?