Q114. Which operation will impact performance of the management plane?

Q115. Site-A and Site-B have a site-to-site VPN set up between them. OSPF is configured to dynamically create the routes between the sites. The OSPF configuration in Site-A is configured properly, but the route for the tunner is not being established. The Site-B interfaces in the graphic are using a broadcast Link Type. The administrator has determined that the OSPF configuration in Site-B is using the wrong Link Type for one of its interfaces.

Which Link Type setting will correct the error?

Q116. An administrator deploys PA-500 NGFWs as an active/passive high availability pair. The devices are not participating in dynamic routing and preemption is disabled.
What must be verified to upgrade the firewalls to the most recent version of PAN-OS software?

Q117. A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects. How would an administrator configure the interface to 1Gbps?

Q118. Which three options are supported in HA Lite? (Choose three.)

Q119. YouTube videos are consuming too much bandwidth on the network, causing delays in mission-critical traffic.
The administrator wants to throttle YouTube traffic. The following interfaces and zones are in use on the firewall:
* ethernet1/1, Zone: Untrust (Internet-facing)
* ethernet1/2, Zone: Trust (client-facing)
A QoS profile has been created, and QoS has been enabled on both interfaces. A QoS rule exists to put the YouTube application into QoS class 6. Interface Ethernet1/1 has a QoS profile called Outbound, and interface Ethernet1/2 has a QoS profile called Inbound.
Which setting for class 6 with throttle YouTube traffic?

Q120. When using the predefined default profile, the policy will inspect for viruses on the decoders. Match each decoder with its default action.
Answer options may be used more than once or not at all.

Q121. An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an internal system.
Which Security Profile type will prevent this attack?

Q122. Starting with PAN-OS version 9.1, application dependency information is now reported in which new locations? (Choose two.)

Q123. When is the content inspection performed in the packet flow process?

Q124. A company wants to install a PA-3060 firewall between two core switches on a VLAN trunk link. They need to assign each VLAN to its own zone and to assign untagged (native) traffic to its own zone which options differentiates multiple VLAN into separate zones?

Q125. At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

Q126. What can you use with Global Protect to assign user-specific client certificates to each GlobalProtect user?

Q127. Which three firewall multi-factor authentication factors are supported by PAN-OS? (Choose three)

Q128. Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?

Q129. Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

Q130. A user’s traffic traversing a Palo Alto Networks NGFW sometimes can reach http://www.company.com. At other times the session times out. The NGFW has been configured with a PBF rule that the user’s traffic matches when it goes to http://www.company.com.
How can the firewall be configured automatically disable the PBF rule if the next hop goes down?

Q131. Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a “No Decrypt” action? (Choose two.)

Q132. For which two reasons would a firewall discard a packet as part of the packet flow sequence? (Choose two )

Q133. Which two statements are true about DoS Protection and Zone Protection Profiles? (Choose two).

Q134. Which type of interface does a firewall use to forward decrypted traffic to a security chain for inspection?

Q135. Which two virtualization platforms officially support the deployment of Palo Alto Networks VM-Series firewalls? (Choose two.)

Q136. A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server.
What can be done to simplify the NAT policy?

Q137. An engineer is creating a security policy based on Dynamic User Groups (DUG) What benefit does this provide?