NEW QUESTION 24
An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. THE update contains application that matches the same traffic signatures as the customer application.
Which application should be used to identify traffic traversing the NGFW?

NEW QUESTION 25
Which processing order will be enabled when a panorama administrator selects the setting “Objects defined in ancestors will takes higher precedence?

NEW QUESTION 26
If an administrator wants to decrypt SMTP traffic and possesses the saver’s certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?

NEW QUESTION 27
An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?

NEW QUESTION 28
Which two methods can be used to verify firewall connectivity to Autofocus? (Choose two. )

NEW QUESTION 29
What are two benefits of nested device groups in panorama? (Choose two )

NEW QUESTION 30
Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?

NEW QUESTION 31
The firewall identified a popular application as a unknown-tcp. Which options are available to identify the application? (Choose two.)

NEW QUESTION 32
Which administrative authentication method supports authorization by an external service?

NEW QUESTION 33
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

NEW QUESTION 34
View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?

NEW QUESTION 35
A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?

NEW QUESTION 36
An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. How would the administrator establish the chain of trust?

NEW QUESTION 37
Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)

NEW QUESTION 38
Which DoS protection mechanism detects and prevents session exhaustion attacks?

NEW QUESTION 39
During the packet flow process, which two processes are performed in application identification? (Choose two.)

NEW QUESTION 40
Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a” NO Decrypt” action? (Choose two.)

NEW QUESTION 41
Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

NEW QUESTION 42
An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs.
The administrator assigns priority 100 to the active firewall.
Which priority is collect tot the passive firewall?

NEW QUESTION 43
An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?

NEW QUESTION 44
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

NEW QUESTION 45
Winch three steps will reduce the CPU utilization on the management plane? (Choose three. ) Disable logging at session start in Security policies.