- All Exams Instant Download
WildFire will submit for analysis blocked files that match which profile settings?
WildFire will submit for analysis blocked files that match which profile settings?A . files matching Anti-Spyware signaturesB . files that are blocked by URL filteringC . files that are blocked by a File Blocking profileD . files matching Anti-Virus signaturesView AnswerAnswer: C
What is the best description of the HA4 Keep-Alive Threshold (ms)?
What is the best description of the HA4 Keep-Alive Threshold (ms)?A . the maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational.B . The time that a passive or active-secondary firewall will wait before taking over as the active...
What type of address object would be useful for internal devices where the addressing structure assigns meaning to certain bits in the address, as illustrated in the diagram?
What type of address object would be useful for internal devices where the addressing structure assigns meaning to certain bits in the address, as illustrated in the diagram? A . IP NetmaskB . IP Wildcard MaskC . IP AddressD . IP RangeView AnswerAnswer: B
Where would the administrator go to edit a template variable at the device level?
An administrator needs to assign a specific DNS server to one firewall within a device group. Where would the administrator go to edit a template variable at the device level?A . Variable CSV export under Panorama > templatesB . PDF Export under Panorama > templatesC . Manage variables under Panorama...
What happens when an A/P firewall cluster synchronies IPsec tunnel security associations (SAs)?
What happens when an A/P firewall cluster synchronies IPsec tunnel security associations (SAs)?A . Phase 2 SAs are synchronized over HA2 linksB . Phase 1 and Phase 2 SAs are synchronized over HA2 linksC . Phase 1 SAs are synchronized over HA1 linksD . Phase 1 and Phase 2 SAs...
How can the issue be corrected?
Refer to the image. An administrator is tasked with correcting an NTP service configuration for firewalls that cannot use the Global template NTP servers. The administrator needs to change the IP address to a preferable server for this template stack but cannot impact other template stacks. How can the issue...
How should the administrator identify the configuration changes?
An administrator needs to evaluate a recent policy change that was committed and pushed to a firewall device group. How should the administrator identify the configuration changes?A . review the configuration logs on the Monitor tabB . click Preview Changes under Push ScopeC . use Test Policy Match to review...
How will the rule order populate once pushed to the firewall?
the firewall's device group as post-rules How will the rule order populate once pushed to the firewall?A . shared device group policies, firewall device group policies. local policies.B . firewall device group policies, local policies. shared device group policiesC . shared device group policies. local policies, firewall device group policiesD...
How should those rules be configured to ensure that they are evaluated with a high priority?
An administrator is building Security rules within a device group to block traffic to and from malicious locations How should those rules be configured to ensure that they are evaluated with a high priority?A . Create the appropriate rules with a Block action and apply them at the top of...
Which configuration task is best for reducing load on the management plane?
Which configuration task is best for reducing load on the management plane?A . Disable logging on the default deny ruleB . Enable session logging at startC . Disable pre-defined reportsD . Set the URL filtering action to send alertsView AnswerAnswer: C
