NEW QUESTION 1
DRAG DROP
Match the Cyber-Attack Lifecycle stage to its correct description.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 2
DRAG DROP
Match the Palo Alto Networks Security Operating Platform architecture to its description.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 3
Which two App-ID applications will need to be allowed to use Facebook- chat? (Choose two.)

• A. facebook
• B. facebook-chat
• C. facebook-base
• D. facebook-email

Answer: BC

NEW QUESTION 4
Given the topology, which zone type should zone A and zone B to be configured with?

• A. Layer3
• B. Tap
• C. Layer2
• D. Virtual Wire

Answer: A

NEW QUESTION 5
How many zones can an interface be assigned with a Palo Alto Networks firewall?

• A. two
• B. three
• C. four
• D. one

Answer: BC

Explanation:
5. Which two configuration settings shown are not the default? (Choose two.)
A. Enable Security Log
B. Server Log Monitor Frequency (sec)
C. Enable Session
D. Enable Probing

NEW QUESTION 6
Which statement is true regarding a Prevention Posture Assessment?

• A. The Security Policy Adoption Heatmap component filters the information by device groups, serial numbers, zones, areas of architecture, and other categories
• B. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture
• C. It provides a percentage of adoption for each assessment area
• D. It performs over 200 security checks on Panorama/firewall for the assessment

Answer: B

NEW QUESTION 7
Which User-ID mapping method should be used for an environment with clients that do not authenticate to Windows Active Directory?

• A. Windows session monitoring via a domain controller
• B. passive server monitoring using the Windows-based agent
• C. Captive Portal
• D. passive server monitoring using a PAN-OS integrated User-ID agent

Answer: C

NEW QUESTION 8
Which file is used to save the running configuration with a Palo Alto Networks firewall?

• A. running-config.xml
• B. run-config.xml
• C. running-configuration.xml
• D. run-configuratin.xml

Answer: A

NEW QUESTION 9
Which user mapping method could be used to discover user IDs in an environment with multiple Windows domain controllers?

• A. Active Directory monitoring
• B. Windows session monitoring
• C. Windows client probing
• D. domain controller monitoring

Answer: A

NEW QUESTION 10
What are two differences between an implicit dependency and an explicit dependency in App- ID? (Choose two.)

• A. An implicit dependency does not require the dependent application to be added in the security policy
• B. An implicit dependency requires the dependent application to be added in the security policy
• C. An explicit dependency does not require the dependent application to be added in the security policy
• D. An explicit dependency requires the dependent application to be added in the security policy

Answer: AD

NEW QUESTION 11
A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

• A. Rule Usage Filter > No App Specified
• B. Rule Usage Filter >Hit Count > Unused in 30 days
• C. Rule Usage Filter > Unused Apps
• D. Rule Usage Filter > Hit Count > Unused in 90 days

Answer: D

NEW QUESTION 12
Which license must an Administrator acquire prior to downloading Antivirus Updates for use with the firewall?

• A. Threat Prevention License
• B. Threat Implementation License
• C. Threat Environment License
• D. Threat Protection License

Answer: A

NEW QUESTION 13
......