- All Exams Instant Download
What should the administrator consider with regards to the WildFire infra-structure?
An administrator has purchased WildFire subscriptions for 90 firewalls globally. What should the administrator consider with regards to the WildFire infra-structure?A . To comply with data privacy regulations, WildFire signatures and ver-dicts are not shared globally.B . Palo Alto Networks owns and maintains one global cloud and four WildFire regional...
In a template, which two objects can be configured? (Choose two.)
In a template, which two objects can be configured? (Choose two.)A . SD-WAN path quality profileB . Monitor profileC . IPsec tunnelD . Application groupView AnswerAnswer: BC Explanation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/network/network-network-profiles/network-network-profiles-monitor.html
What is the best definition of the Heartbeat Interval?
What is the best definition of the Heartbeat Interval?A . The interval in milliseconds between hello packetsB . The frequency at which the HA peers check link or path availabilityC . The frequency at which the HA peers exchange pingD . The interval during which the firewall will remain active...
Which three settings can be configured in this template?
An engineer needs to configure a standardized template for all Panorama-managed firewalls. These settings will be configured on a template named "Global" and will be included in all template stacks. Which three settings can be configured in this template? (Choose three.)A . Log Forwarding profileB . SSL decryption exclusionC ....
Which type of zone will allow different virtual systems to communicate with each other?
Which type of zone will allow different virtual systems to communicate with each other?A . TapB . ExternalC . Virtual WireD . TunnelView AnswerAnswer: B Explanation: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/virtual-systems/communication-between-virtual-systems/inter-vsys-traffic-that-remains-within-the-firewall/external-zone
What must be configured to apply tags automatically based on User-ID logs?
What must be configured to apply tags automatically based on User-ID logs?A . Device IDB . Log Forwarding profileC . Group mappingD . Log settingsView AnswerAnswer: D Explanation: To apply tags automatically based on User-ID logs, the engineer must configure a Log Forwarding profile that specifies the criteria for matching...
How does the firewall identify the New App-ID characteristic?
A firewall engineer creates a new App-ID report under Monitor > Reports > Application Reports > New Applications to monitor new applications on the network and better assess any Security policy updates the engineer might want to make. How does the firewall identify the New App-ID characteristic?A . It matches...
What are three tasks that cannot be configured from Panorama by using a template stack? (Choose three.)
What are three tasks that cannot be configured from Panorama by using a template stack? (Choose three.)A . Change the firewall management IP addressB . Configure a device block listC . Add administrator accountsD . Rename a vsys on a multi-vsys firewallE . Enable operational modes such as normal mode,...
What can they do to reduce commit times?
A company has recently migrated their branch office's PA-220S to a centralized Panorama. This Panorama manages a number of PA-7000 Series and PA-5200 Series devices All device group and template configuration is managed solely within Panorama. They notice that commit times have drastically increased for the PA-220S after the migration....
ln a security-first network, what is the recommended threshold value for apps and threats to be dynamically updated?
ln a security-first network, what is the recommended threshold value for apps and threats to be dynamically updated?A . 1 to 4 hoursB . 6 to 12 hoursC . 24 hoursD . 36 hoursView AnswerAnswer: B Explanation: Schedule content updates so that they download-and-install automatically. Then, set a Threshold that...
