- All Exams Instant Download
Which three statements accurately describe Decryption Mirror? (Choose three.)
Which three statements accurately describe Decryption Mirror? (Choose three.)A . Decryption Mirror requires a tap interface on the firewallB . Decryption, storage, inspection and use of SSL traffic are regulated in certain countriesC . Only management consent is required to use the Decryption Mirror featureD . You should consult with...
Where will the object need to be created within the device-group hierarchy?
Refer to the diagram. An administrator needs to create an address object that will be useable by the NYC. MA, CA and WA device groups Where will the object need to be created within the device-group hierarchy?A . AmericasB . USC . EastD . WestView AnswerAnswer: A
A traffic log might list an application as "not-applicable" for which two reasons'? (Choose two)
A traffic log might list an application as "not-applicable" for which two reasons'? (Choose two)A . The firewall did not install the sessionB . The TCP connection terminated without identifying any application dataC . The firewall dropped a TCP SYN packetD . There was not enough application data after the...
Which action and packet-capture setting for items of high severity and critical severity best matches Palo Alto Networks best practice'?
The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice. As part of that effort, the manager has assigned you the Vulnerability Protection profile for the internet gateway firewall. Which action and packet-capture setting for items...
Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two)
Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two)A . Dos Protection policyB . QoS ProfileC . Zone Protection ProfileD . DoS Protection ProfileView AnswerAnswer: C,D Explanation: Flood Attack Protection Zone Protection Profiles protect against of five types of floods: • SYN (TCP) • UDP...
What happens to traffic traversing SD-WAN fabric that doesn't match any SD-WAN policies?
What happens to traffic traversing SD-WAN fabric that doesn't match any SD-WAN policies?A . Traffic is dropped because there is no matching SD-WAN policy to direct traffic.B . Traffic matches a catch-all policy that is created through the SD-WAN plugin.C . Traffic matches implied policy rules and is redistributed round...
Place the steps in the WildFire process workflow in their correct order
DRAG DROP Place the steps in the WildFire process workflow in their correct order. View AnswerAnswer: Explanation: Timeline Description automatically generated https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/about-wildfire.html
Which configuration is necessary to retrieve groups from Panorama?
A company wants to use their Active Directory groups to simplify their Security policy creation from Panorama. Which configuration is necessary to retrieve groups from Panorama?A . Configure an LDAP Server profile and enable the User-ID service on the management interface.B . Configure a group mapping profile to retrieve the...
What are two reasons why the firewall might not use a static route?
An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes that the firewall is not using a static route. What are two reasons why the firewall might not use a static route? (Choose...
Given the following snippet of a WildFire submission log. did the end-user get access to the requested information and why or why not?
Given the following snippet of a WildFire submission log. did the end-user get access to the requested information and why or why not? A . Yes. because the action is set to "allow ''B . No because WildFire categorized a file with the verdict "malicious"C . Yes because the action...
