NO.17 Which three file types can be forward to WildMFire for analysis a part of the basic WildMFire service?

NO.18 An administrator has created an SSL Decryption policy rule that decrypts SSL sessions on any port. Which log entry can the administrator use to verify that sessions are being decrypted?

NO.19 A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?

NO.20 A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server. Which solution in PAN -OS software would help in this case?

NO.21 An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

NO.22 A session in the Traffic log is reporting the application as “incomplete” What does “incomplete” mean?

NO.23 Which User-ID method should b configured to map addresses to usernames for users connected through a terminal server?

NO.24 Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

NO.25 Which Captive Portal mode must be contoured to support MFA authentication?

NO.26 A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny”.
Which action will this configuration cause on the matched traffic?

NO.27 Which option would an administration choose to define the certificate and protect that Panorama and its managed devices uses for SSL/ITS services?

NO.28 Which three authentication faction factors does PAN-OS software support for MFA? (Choose three.)

NO.29 A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-number or bacon out to eternal command-and-control (C2) servers.
Which Security Profile type will prevent these behaviors?

NO.30 What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

NO.31 In High Availability, which information is transferred via the HA data link?

NO.32 An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. THE update contains application that matches the same traffic signatures as the customer application.
Which application should be used to identify traffic traversing the NGFW?

NO.33 Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

NO.34 A user’s traffic traversing a Palo Alto Networks NGFW sometime can reach http//www company com At the session times out.
The NGFW has been configured with a PBF rule that the user’s traffic matches when it goes to http //www company com.
How con the firewall be configured to automatically disable the PBF rule if the next hop goes down?

NO.35 A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation.
Which two formats are correct for naming aggregate interlaces? (Choose two.)

NO.36 Which three options are supposed in HA Lite? (Choose three.)

NO.37 Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)

NO.38 Which method will dynamically register tags on the Palo Alto Networks NGFW?