- All Exams Instant Download
Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?
Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?A . Boundary automationB . Hypervisor integrationC . BootstrappingD . Dynamic Address GroupView AnswerAnswer: D Explanation: Dynamic Address Group is the PAN-OS feature that allows for automated updates to address...
Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources from malware and lateral movement? (Choose two.)
Which two subscriptions should be recommended to a customer who is deploying VM-Series firewalls to a private data center but is concerned about protecting data-center resources from malware and lateral movement? (Choose two.)A . Intelligent Traffic OffloadB . Threat PreventionC . WildFireD . SD-WANView AnswerAnswer: B, C Explanation: Threat Prevention...
Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)
Which two factors lead to improved return on investment for prospects interested in Palo Alto Networks virtualized next-generation firewalls (NGFWs)? (Choose two.)A . Decreased likelihood of data breachB . Reduced operational expendituresC . Reduced time to deployD . Reduced insurance premiumsView AnswerAnswer: A, C Explanation: The two factors that lead...
A CN-Series firewall can secure traffic between which elements?
A CN-Series firewall can secure traffic between which elements?A . Host containersB . Source applicationsC . ContainersD . IPodsView AnswerAnswer: C Explanation: Containers are the elements that a CN-Series firewall can secure traffic between. Containers are isolated units of software that run on a shared operating system and have their...
Which technology allows for granular control of east-west traffic in a software-defined network?
Which technology allows for granular control of east-west traffic in a software-defined network?A . RoutingB . MicroseqmentationC . MAC Access Control ListD . VirtualizationView AnswerAnswer: B Explanation: Microsegmentation is a technology that allows for granular control of east-west traffic in a software-defined network. Microsegmentation divides the network into smaller segments...
What can software next-generation firewall (NGFW) credits be used to provision?
What can software next-generation firewall (NGFW) credits be used to provision?A . Remote browser isolationB . Virtual Panorama appliancesC . Migrating NGFWs from hardware to VMsD . Enablement of DNS securityView AnswerAnswer: C Explanation: Software next-generation firewall (NGFW) credits can be used to provision migrating NGFWs from hardware to VMs....
Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)
Which two deployment modes of VM-Series firewalls are supported across NSX-T? (Choose two.)A . Prism CentralB . BootstrapC . Service ClusterD . Host-basedView AnswerAnswer: B, C Explanation: The two deployment modes of VM-Series firewalls that are supported across NSX-T are: Bootstrap Service Cluster NSX-T is a software-defined network (SDN) solution...
Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?
Which feature provides real-time analysis using machine learning (ML) to defend against new and unknown threats?A . Advanced URL Filtering (AURLF)B . Cortex Data LakeC . DNS SecurityD . Panorama VM-Series pluginView AnswerAnswer: C Explanation: DNS Security is the feature that provides real-time analysis using machine learning (ML) to defend...
Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?
Which component allows the flexibility to add network resources but does not require making changes to existing policies and rules?A . Content-IDB . External dynamic listC . App-IDD . Dynamic address groupView AnswerAnswer: D Explanation: Dynamic address group is the component that allows the flexibility to add network resources but...
How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?
How is traffic directed to a Palo Alto Networks firewall integrated with Cisco ACI?A . By using contracts between endpoint groups that send traffic to the firewall using a shared policyB . Through a virtual machine (VM) monitor domainC . Through a policy-based redirectD . By creating an access policyView...
