Exam Dumps VCE

QUESTION 36
A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-number or bacon out to eternal command-and-control (C2) servers.
Which Security Profile type will prevent these behaviors?

QUESTION 37
The firewall identified a popular application as a unknown-tcp. Which options are available to identify the application? (Choose two.)

QUESTION 38
An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs.
The administrator assigns priority 100 to the active firewall.
Which priority is collect tot the passive firewall?

QUESTION 39
Which Captive Portal mode must be contoured to support MFA authentication?

QUESTION 40
A Company needs to preconfigured firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to Hie future site?

QUESTION 41
The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.
Which two options would help the administrator Troubleshoot this issue? (Choose two.)

QUESTION 42
Which CLI command enables an administrator to view detail about the firewall including uptime. PAN -OS version, and serial number?

QUESTION 43
When is the content inspection performed in the packet flow process?

QUESTION 44
Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?

QUESTION 45
Which User-ID method should b configured to map addresses to usernames for users connected through a terminal server?

QUESTION 46
An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. THE update contains application that matches the same traffic signatures as the customer application.
Which application should be used to identify traffic traversing the NGFW?

QUESTION 47
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?

QUESTION 48
An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)

QUESTION 49
If an administrator wants to decrypt SMTP traffic and possesses the saver’s certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?

QUESTION 50
Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a” NO Decrypt” action? (Choose two.)

QUESTION 51
What are two benefits of nested device groups in panorama? (Choose two )

QUESTION 52
An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.) A)

B)

C)

D)

QUESTION 53
In High Availability, which information is transferred via the HA data link?

QUESTION 54
An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

QUESTION 55
Which version of Global Protect supports split tunneling based on destination domain, client process, and HTTP/HTTPs video streaming application?