For customers with high bandwidth requirements for Service Connections, what two limitations exist when onboarding multiple Service Connections to the same Prisma Access location servicing a single Datacenter? (Choose two.) A. Network segments in the Datacenter need to be advertised to only one Service Connection B. The customer edge device needs to support policy-based routing […]

Which two features are found in Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.) A. Policy match is based on application B. Traffic control is based on IP, port, and protocol C. Traffic is separated by zones D. Identification of application is possible on any port

A customer requests that a known spyware threat signature be triggered based on a rate of occurrence, for example, 10 hits in 5 seconds. How is this goal accomplished? A. Create a custom spyware signature matching the known signature with the time attribute B. Add a correlation object that tracks the occurrences and triggers above […]

Which task would be identified in Best Practice Assessment tool? A. identify the visibility and presence of command-and-control sessions B. identify sanctioned and unsanctioned SaaS applications C. identify the threats associated with each application D. identify and provide recommendations for device management access

There are different Master Keys on Panorama and managed firewalls. What is the result if a Panorama Administrator pushes configuration to managed firewalls? A. The push operation will fail regardless of an error or not within the configuration itself B. Provided there’s no error within the configuration to be pushed, the push will succeed C. […]

Which two of the following does decryption broker provide on a NGFW? (Choose two.) A. Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once B. Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of […]

What two types of certificates are used to configure SSL Forward Proxy? (Сhoose two.) A. Enterprise CA-signed certificates B. Self-Signed certificates C. Intermediate certificates D. Private key certificates Reference: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/configure-ssl-forward-proxy#:~:text=You%20can%20use%20an%20enterprise,as%20the%20forward%20trust%20certificate.&text=Certificate%20Name-,.,unique%20name%20for%20each%20firewall

Which two email links, contained in SMTP and POP3, can be submitted from WildFire analysis with a WildFire subscription? (Choose two.) A. FTP B. HTTPS C. RTP D. HTTP

A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint […]

The need for a file proxy solution, virus and spyware scanner, a vulnerability scanner, and HTTP decoder for URL filtering is handled by which component in the NGFW? A. First Packet Processor B. Stream-based Signature Engine C. SIA (Scan It All) Processing Engine D. Security Processing Engine Reference: https://media.paloaltonetworks.com/documents/Single_Pass_Parallel_Processing_Architecture.pdfn (page 6)