QUESTION 14
A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?

QUESTION 15
Which processing order will be enabled when a panorama administrator selects the setting “Objects defined in ancestors will takes higher precedence?

QUESTION 16
VPN traffic intended for an administrator’s Palo Alto Networks NGfW is being maliciously intercepted and retransmitted by the interceptor. When Creating a VPN tunnel, which protection profile cm be enabled to prevent this malicious behavior?

QUESTION 17
Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a” NO Decrypt” action? (Choose two.)

QUESTION 18
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

QUESTION 19
An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?

QUESTION 20
A user’s traffic traversing a Palo Alto Networks NGFW sometime can reach http//www company com At the session times out.
The NGFW has been configured with a PBF rule that the user’s traffic matches when it goes to http //www company com.
How con the firewall be configured to automatically disable the PBF rule if the next hop goes down?

QUESTION 21
A session in the Traffic log is reporting the application as “incomplete” What does “incomplete” mean?

QUESTION 22
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

QUESTION 23
Which event will happen administrator uses an Application Override Policy?

QUESTION 24
A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server. Which solution in PAN -OS software would help in this case?

QUESTION 25
Which PAN-OS policy must you configure to force a user to provide additional credential before he is allowed to access an internal application that contains highly sensitive business data?

QUESTION 26
Which three options are supposed in HA Lite? (Choose three.)

QUESTION 27
Which DoS protection mechanism detects and prevents session exhaustion attacks?

QUESTION 28
Which method will dynamically register tags on the Palo Alto Networks NGFW?

QUESTION 29
Which two methods can be used to verify firewall connectivity to Autofocus? (Choose two. )

QUESTION 30
When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinhole enabled, generating a traffic log.
What will be the destination IP Address in that log entry?

QUESTION 31
An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

QUESTION 32
Which three authentication faction factors does PAN-OS software support for MFA? (Choose three.)