What are the next steps to migrate configuration from the firewalls to Panorama?

A company with already deployed Palo Alto firewalls has purchased their first Panorama server. The security team has already configured all firewalls with the Panorama IP address and added all the firewall serial numbers in Panorama. What are the next steps to migrate configuration from the firewalls to Panorama?A ....

July 27, 2023 No Comments READ MORE +

What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?

An engineer is pushing configuration from Panorama lo a managed firewall. What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?A . The firewall rejects the pushed configuration, and the commit fails. B. The firewall renames the duplicate local...

July 26, 2023 No Comments READ MORE +

What are two explanations for this type of issue?

After configuring HA in Active/Passive mode on a pair of firewalls the administrator gets a failed commit with the following details. What are two explanations for this type of issue? (Choose two)A . The peer IP is not included in the permit list on Management Interface Settings B. The Backup...

July 26, 2023 No Comments READ MORE +

Which statement best describes the Automated Commit Recovery feature?

Which statement best describes the Automated Commit Recovery feature?A . It performs a connectivity check between the firewall and Panorama after every configuration commit on the firewall. It reverts the configuration changes on the firewall if the check fails. B. It restores the running configuration on a firewall and Panorama...

July 26, 2023 No Comments READ MORE +

Which configuration task is best for reducing load on the management plane?

Which configuration task is best for reducing load on the management plane?A . Disable logging on the default deny rule B. Enable session logging at start C. Disable pre-defined reports D. Set the URL filtering action to send alertsView AnswerAnswer: C Explanation: Report generation can also consume considerable resources, while...

July 22, 2023 No Comments READ MORE +

Based on the graphic which statement accurately describes the output shown in the Server Monitoring panel?

Based on the graphic which statement accurately describes the output shown in the Server Monitoring panel? A. The User-ID agent is connected to a domain controller labeled lab-client B. The host lab-client has been found by a domain controller C. The host lab-client has been found by the User-ID agent....

July 22, 2023 No Comments READ MORE +

What are two explanations for this type of issue?

After configuring HA in Active/Passive mode on a pair of firewalls the administrator gets a failed commit with the following details. What are two explanations for this type of issue? (Choose two)A . The peer IP is not included in the permit list on Management Interface Settings B. The Backup...

July 21, 2023 No Comments READ MORE +

Which profile or certificate is required before any traffic that matches an SSL decryption rule is decrypted?

An engineer must configure a new SSL decryption deployment. Which profile or certificate is required before any traffic that matches an SSL decryption rule is decrypted?A . There must be a certificate with both the Forward Trust option and Forward Untrust option selected. B. A Decryption profile must be attached...

July 21, 2023 No Comments READ MORE +

How can an administrator use the Panorama device-deployment option to update the apps and threat version of an HA pair of managed firewalls?

How can an administrator use the Panorama device-deployment option to update the apps and threat version of an HA pair of managed firewalls?A . Configure the firewall's assigned template to download the content updates. B. Choose the download and install action for both members of the HA pair in the...

July 21, 2023 No Comments READ MORE +

Which log type would provide information about traffic blocked by a Zone Protection profile?

Which log type would provide information about traffic blocked by a Zone Protection profile?A . Data Filtering B. IP-Tag C. Traffic D. ThreatView AnswerAnswer: D Explanation: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clm9CAC Zone Protection profile is a set of security policies that you can apply to an interface or zone to protect it from reconnaissance,...

July 21, 2023 No Comments READ MORE +