{"id":47667,"date":"2022-11-08T01:02:28","date_gmt":"2022-11-08T01:02:28","guid":{"rendered":"https:\/\/www.dumpsbase.com\/freedumps\/?p=47667"},"modified":"2022-11-08T01:02:33","modified_gmt":"2022-11-08T01:02:33","slug":"palo-alto-networks-pcnse-study-guide-updated-practice-the-latest-pcnse-exam-questions","status":"publish","type":"post","link":"https:\/\/www.dumpsbase.com\/freedumps\/palo-alto-networks-pcnse-study-guide-updated-practice-the-latest-pcnse-exam-questions.html","title":{"rendered":"Palo Alto Networks PCNSE Study Guide Updated &#8211; Practice The Latest PCNSE Exam Questions"},"content":{"rendered":"\n<p>The Palo Alto Networks PCNSE study guide has been updated, the current version of DumpsBase PCNSE dumps is V19.02 with 152 practice exam questions and answers. All these questions are the latest which were collected by experienced experts according to the actual exam objectives. Also, the answers have been verified by successful candidates and specialists. With the latest PCNSE study guide of DumpsBase, you can pass the Palo Alto Networks Certified Network Security Engineer Exam smoothly.\u00a0<\/p>\n<h2>Check Palo Alto Networks <em><span style=\"background-color: #339966;\">PCNSE Free Dumps Demo<\/span><\/em> First<\/h2>\n<script>\n\t  window.fbAsyncInit = function() {\n\t    FB.init({\n\t      appId            : '622169541470367',\n\t      autoLogAppEvents : true,\n\t      xfbml            : true,\n\t      version          : 'v3.1'\n\t    });\n\t  };\n\t\n\t  (function(d, s, id){\n\t     var js, fjs = d.getElementsByTagName(s)[0];\n\t     if (d.getElementById(id)) {return;}\n\t     js = d.createElement(s); js.id = id;\n\t     js.src = \"https:\/\/connect.facebook.net\/en_US\/sdk.js\";\n\t     fjs.parentNode.insertBefore(js, fjs);\n\t   }(document, 'script', 'facebook-jssdk'));\n\t<\/script><script type=\"text\/javascript\" >\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \nif(!window.jQuery) alert(\"The important jQuery library is not properly loaded in your site. Your WordPress theme is probably missing the essential wp_head() call. You can switch to another theme and you will see that the plugin works fine and this notice disappears. If you are still not sure what to do you can contact us for help.\");\n});\n<\/script>  \n  \n<div  id=\"watupro_quiz\" class=\"quiz-area single-page-quiz\">\n<p id=\"submittingExam6750\" style=\"display:none;text-align:center;\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\"><\/p>\n\n<div class=\"watupro-exam-description\" id=\"description-quiz-6750\"><\/div>\n\n<form action=\"\" method=\"post\" class=\"quiz-form\" id=\"quiz-6750\"  enctype=\"multipart\/form-data\" >\n<div class='watu-question ' id='question-1' style=';'><div id='questionWrap-1'  class='   watupro-question-id-240955'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>1. <\/span>An enterprise information Security team has deployed policies based on AD groups to restrict user access to critical infrastructure systems However a recent phisning campaign against the organization has prompted Information Security to look for more controls that can secure access to critical assets For users that need to access these systems Information Security wants to use PAN-OS multi-factor authentication (MFA) integration to enforce MFA. <br \/>\r<br>What should the enterprise do to use PAN-OS MFA1?<\/div><input type='hidden' name='question_id[]' id='qID_1' value='240955' \/><input type='hidden' id='answerType240955' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240955[]' id='answer-id-954950' class='answer   answerof-240955 ' value='954950'   \/><label for='answer-id-954950' id='answer-label-954950' class=' answer'><span>Configure a Captive Porta1 authentication policy that uses an authentication profile that references a RADIUS profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240955[]' id='answer-id-954951' class='answer   answerof-240955 ' value='954951'   \/><label for='answer-id-954951' id='answer-label-954951' class=' answer'><span>Create an authentication profile and assign another authentication factor to be used by a Captive Portal authentication policy<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240955[]' id='answer-id-954952' class='answer   answerof-240955 ' value='954952'   \/><label for='answer-id-954952' id='answer-label-954952' class=' answer'><span>Configure a Captive Portal authentication policy that uses an authentication sequence<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240955[]' id='answer-id-954953' class='answer   answerof-240955 ' value='954953'   \/><label for='answer-id-954953' id='answer-label-954953' class=' answer'><span>Use a Credential Phishing agent to detect prevent and mitigate credential phishing campaigns<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-2' style=';'><div id='questionWrap-2'  class='   watupro-question-id-240956'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>2. <\/span>What can an engineer use with GlobalProtect to distribute user-specific client certificates to each GlobalProtect user?<\/div><input type='hidden' name='question_id[]' id='qID_2' value='240956' \/><input type='hidden' id='answerType240956' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240956[]' id='answer-id-954954' class='answer   answerof-240956 ' value='954954'   \/><label for='answer-id-954954' id='answer-label-954954' class=' answer'><span>Certificate profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240956[]' id='answer-id-954955' class='answer   answerof-240956 ' value='954955'   \/><label for='answer-id-954955' id='answer-label-954955' class=' answer'><span>SSL\/TLS Service profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240956[]' id='answer-id-954956' class='answer   answerof-240956 ' value='954956'   \/><label for='answer-id-954956' id='answer-label-954956' class=' answer'><span>OCSP Responder<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240956[]' id='answer-id-954957' class='answer   answerof-240956 ' value='954957'   \/><label for='answer-id-954957' id='answer-label-954957' class=' answer'><span>SCEP<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-3' style=';'><div id='questionWrap-3'  class='   watupro-question-id-240957'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>3. <\/span>You need to allow users to access the office-suite applications of their choice. <br \/>\r<br>How should you configure the firewall to allow access to any office-suite application?<\/div><input type='hidden' name='question_id[]' id='qID_3' value='240957' \/><input type='hidden' id='answerType240957' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240957[]' id='answer-id-954958' class='answer   answerof-240957 ' value='954958'   \/><label for='answer-id-954958' id='answer-label-954958' class=' answer'><span>Create an Application Group and add Office 365, Evernote Google Docs and Libre Office<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240957[]' id='answer-id-954959' class='answer   answerof-240957 ' value='954959'   \/><label for='answer-id-954959' id='answer-label-954959' class=' answer'><span>Create an Application Group and add business-systems to it.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240957[]' id='answer-id-954960' class='answer   answerof-240957 ' value='954960'   \/><label for='answer-id-954960' id='answer-label-954960' class=' answer'><span>Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240957[]' id='answer-id-954961' class='answer   answerof-240957 ' value='954961'   \/><label for='answer-id-954961' id='answer-label-954961' class=' answer'><span>Create an Application Filter and name it Office Programs then filter on the business-systems category.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-4' style=';'><div id='questionWrap-4'  class='   watupro-question-id-240958'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>4. <\/span>the firewall's device group as post-rules <br \/>\r<br>How will the rule order populate once pushed to the firewall?<\/div><input type='hidden' name='question_id[]' id='qID_4' value='240958' \/><input type='hidden' id='answerType240958' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240958[]' id='answer-id-954962' class='answer   answerof-240958 ' value='954962'   \/><label for='answer-id-954962' id='answer-label-954962' class=' answer'><span>shared device group policies, firewall device group policies. local policies.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240958[]' id='answer-id-954963' class='answer   answerof-240958 ' value='954963'   \/><label for='answer-id-954963' id='answer-label-954963' class=' answer'><span>firewall device group policies, local policies. shared device group policies<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240958[]' id='answer-id-954964' class='answer   answerof-240958 ' value='954964'   \/><label for='answer-id-954964' id='answer-label-954964' class=' answer'><span>shared device group policies. local policies, firewall device group policies<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240958[]' id='answer-id-954965' class='answer   answerof-240958 ' value='954965'   \/><label for='answer-id-954965' id='answer-label-954965' class=' answer'><span>local policies, firewall device group policies, shared device group policies<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-5' style=';'><div id='questionWrap-5'  class='   watupro-question-id-240959'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>5. <\/span>When using certificate authentication for firewall administration, which method is used for authorization?<\/div><input type='hidden' name='question_id[]' id='qID_5' value='240959' \/><input type='hidden' id='answerType240959' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240959[]' id='answer-id-954966' class='answer   answerof-240959 ' value='954966'   \/><label for='answer-id-954966' id='answer-label-954966' class=' answer'><span>Radius<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240959[]' id='answer-id-954967' class='answer   answerof-240959 ' value='954967'   \/><label for='answer-id-954967' id='answer-label-954967' class=' answer'><span>LDAP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240959[]' id='answer-id-954968' class='answer   answerof-240959 ' value='954968'   \/><label for='answer-id-954968' id='answer-label-954968' class=' answer'><span>Kerberos<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240959[]' id='answer-id-954969' class='answer   answerof-240959 ' value='954969'   \/><label for='answer-id-954969' id='answer-label-954969' class=' answer'><span>Local<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-6' style=';'><div id='questionWrap-6'  class='   watupro-question-id-240960'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>6. <\/span>Which statement accurately describes service routes and virtual systems?<\/div><input type='hidden' name='question_id[]' id='qID_6' value='240960' \/><input type='hidden' id='answerType240960' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240960[]' id='answer-id-954970' class='answer   answerof-240960 ' value='954970'   \/><label for='answer-id-954970' id='answer-label-954970' class=' answer'><span>Virtual systems that do not have specific service routes configured inherit the global service and service route settings for the firewall.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240960[]' id='answer-id-954971' class='answer   answerof-240960 ' value='954971'   \/><label for='answer-id-954971' id='answer-label-954971' class=' answer'><span>Virtual systems can only use one interface for all global service and service routes of the firewall.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240960[]' id='answer-id-954972' class='answer   answerof-240960 ' value='954972'   \/><label for='answer-id-954972' id='answer-label-954972' class=' answer'><span>Virtual systems cannot have dedicated service routes configured; and virtual systems always use the global service and service route settings for the firewall.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240960[]' id='answer-id-954973' class='answer   answerof-240960 ' value='954973'   \/><label for='answer-id-954973' id='answer-label-954973' class=' answer'><span>The interface must be used for traffic to the required external services.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-7' style=';'><div id='questionWrap-7'  class='   watupro-question-id-240961'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>7. <\/span>Which statement regarding HA timer settings is true?<\/div><input type='hidden' name='question_id[]' id='qID_7' value='240961' \/><input type='hidden' id='answerType240961' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240961[]' id='answer-id-954974' class='answer   answerof-240961 ' value='954974'   \/><label for='answer-id-954974' id='answer-label-954974' class=' answer'><span>Use the Recommended profile for typical failover timer settings<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240961[]' id='answer-id-954975' class='answer   answerof-240961 ' value='954975'   \/><label for='answer-id-954975' id='answer-label-954975' class=' answer'><span>Use the Moderate profile for typical failover timer settings<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240961[]' id='answer-id-954976' class='answer   answerof-240961 ' value='954976'   \/><label for='answer-id-954976' id='answer-label-954976' class=' answer'><span>Use the Aggressive profile for slower failover timer settings.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240961[]' id='answer-id-954977' class='answer   answerof-240961 ' value='954977'   \/><label for='answer-id-954977' id='answer-label-954977' class=' answer'><span>Use the Critical profile for faster failover timer settings.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-8' style=';'><div id='questionWrap-8'  class='   watupro-question-id-240962'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>8. <\/span>Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall's management-plane resources are lightly utilized. <br \/>\r<br>Given the size of this environment, which User-ID collection method is sufficient?<\/div><input type='hidden' name='question_id[]' id='qID_8' value='240962' \/><input type='hidden' id='answerType240962' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240962[]' id='answer-id-954978' class='answer   answerof-240962 ' value='954978'   \/><label for='answer-id-954978' id='answer-label-954978' class=' answer'><span>Citrix terminal server agent deployed on the network<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240962[]' id='answer-id-954979' class='answer   answerof-240962 ' value='954979'   \/><label for='answer-id-954979' id='answer-label-954979' class=' answer'><span>Windows-based agent deployed on each domain controller<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240962[]' id='answer-id-954980' class='answer   answerof-240962 ' value='954980'   \/><label for='answer-id-954980' id='answer-label-954980' class=' answer'><span>PAN-OS integrated agent deployed on the firewall<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240962[]' id='answer-id-954981' class='answer   answerof-240962 ' value='954981'   \/><label for='answer-id-954981' id='answer-label-954981' class=' answer'><span>a syslog listener<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-9' style=';'><div id='questionWrap-9'  class='   watupro-question-id-240963'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>9. <\/span>In SSL Forward Proxy decryption, which two certificates can be used for certificate signing? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_9' value='240963' \/><input type='hidden' id='answerType240963' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240963[]' id='answer-id-954982' class='answer   answerof-240963 ' value='954982'   \/><label for='answer-id-954982' id='answer-label-954982' class=' answer'><span>wildcard server certificate<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240963[]' id='answer-id-954983' class='answer   answerof-240963 ' value='954983'   \/><label for='answer-id-954983' id='answer-label-954983' class=' answer'><span>enterprise CA certificate<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240963[]' id='answer-id-954984' class='answer   answerof-240963 ' value='954984'   \/><label for='answer-id-954984' id='answer-label-954984' class=' answer'><span>client certificate<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240963[]' id='answer-id-954985' class='answer   answerof-240963 ' value='954985'   \/><label for='answer-id-954985' id='answer-label-954985' class=' answer'><span>server certificate<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240963[]' id='answer-id-954986' class='answer   answerof-240963 ' value='954986'   \/><label for='answer-id-954986' id='answer-label-954986' class=' answer'><span>self-signed CA certificate<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-10' style=';'><div id='questionWrap-10'  class='   watupro-question-id-240964'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>10. <\/span>You have upgraded your Panorama and Log Collectors lo 10.2 x. Before upgrading your firewalls using Panorama, what do you need do?<\/div><input type='hidden' name='question_id[]' id='qID_10' value='240964' \/><input type='hidden' id='answerType240964' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240964[]' id='answer-id-954987' class='answer   answerof-240964 ' value='954987'   \/><label for='answer-id-954987' id='answer-label-954987' class=' answer'><span>Refresh your licenses with Palo Alto Network Support - Panorama\/Licenses\/Retrieve License Keys from License Server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240964[]' id='answer-id-954988' class='answer   answerof-240964 ' value='954988'   \/><label for='answer-id-954988' id='answer-label-954988' class=' answer'><span>Re-associate the firewalls in Panorama\/Managed Devices\/Summary.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240964[]' id='answer-id-954989' class='answer   answerof-240964 ' value='954989'   \/><label for='answer-id-954989' id='answer-label-954989' class=' answer'><span>Commit and Push the configurations to the firewalls.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240964[]' id='answer-id-954990' class='answer   answerof-240964 ' value='954990'   \/><label for='answer-id-954990' id='answer-label-954990' class=' answer'><span>Refresh the Mastor Key in Panorama\/Master Key and Diagnostic<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-11' style=';'><div id='questionWrap-11'  class='   watupro-question-id-240965'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>11. <\/span>The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice. As part of that effort, the manager has assigned you the Vulnerability Protection profile for the internet gateway firewall. <br \/>\r<br>Which action and packet-capture setting for items of high severity and critical severity best matches Palo Alto Networks best practice?<\/div><input type='hidden' name='question_id[]' id='qID_11' value='240965' \/><input type='hidden' id='answerType240965' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240965[]' id='answer-id-954991' class='answer   answerof-240965 ' value='954991'   \/><label for='answer-id-954991' id='answer-label-954991' class=' answer'><span>action 'reset-both' and packet capture 'extended-capture'<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240965[]' id='answer-id-954992' class='answer   answerof-240965 ' value='954992'   \/><label for='answer-id-954992' id='answer-label-954992' class=' answer'><span>action 'default' and packet capture 'single-packet'<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240965[]' id='answer-id-954993' class='answer   answerof-240965 ' value='954993'   \/><label for='answer-id-954993' id='answer-label-954993' class=' answer'><span>action 'reset-both' and packet capture 'single-packet'<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240965[]' id='answer-id-954994' class='answer   answerof-240965 ' value='954994'   \/><label for='answer-id-954994' id='answer-label-954994' class=' answer'><span>action 'reset-server' and packet capture 'disable'<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-12' style=';'><div id='questionWrap-12'  class='   watupro-question-id-240966'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>12. <\/span>When configuring forward error correction (FEC) for PAN-OS SD-WAN, an administrator would turn on the feature inside which type of SD-WAN profile?<\/div><input type='hidden' name='question_id[]' id='qID_12' value='240966' \/><input type='hidden' id='answerType240966' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240966[]' id='answer-id-954995' class='answer   answerof-240966 ' value='954995'   \/><label for='answer-id-954995' id='answer-label-954995' class=' answer'><span>Certificate profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240966[]' id='answer-id-954996' class='answer   answerof-240966 ' value='954996'   \/><label for='answer-id-954996' id='answer-label-954996' class=' answer'><span>Path Quality profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240966[]' id='answer-id-954997' class='answer   answerof-240966 ' value='954997'   \/><label for='answer-id-954997' id='answer-label-954997' class=' answer'><span>SD-WAN Interface profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240966[]' id='answer-id-954998' class='answer   answerof-240966 ' value='954998'   \/><label for='answer-id-954998' id='answer-label-954998' class=' answer'><span>Traffic Distribution profile<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-13' style=';'><div id='questionWrap-13'  class='   watupro-question-id-240967'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>13. <\/span>A customer is replacing their legacy remote access VPN solution. The current solution is in place to secure only internet egress for the connected clients Prisma Access has been selected to replace the current remote access VPN solution. <br \/>\r<br>During onboarding the following options and licenses were selected and enabled <br \/>\r<br>- Prisma Access for Remote Networks 300Mbps <br \/>\r<br>- Prisma Access for Mobile Users 1500 Users <br \/>\r<br>- Cortex Data Lake 2TB <br \/>\r<br>- Trusted Zones trust <br \/>\r<br>- Untrusted Zones untrust <br \/>\r<br>- Parent Device Group shared <br \/>\r<br>How can you configure Prisma Access to provide the same level of access as the current VPN solution?<\/div><input type='hidden' name='question_id[]' id='qID_13' value='240967' \/><input type='hidden' id='answerType240967' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240967[]' id='answer-id-954999' class='answer   answerof-240967 ' value='954999'   \/><label for='answer-id-954999' id='answer-label-954999' class=' answer'><span>Configure mobile users with trust-to-untrust Security policy rules to allow the desired traffic outbound to the internet<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240967[]' id='answer-id-955000' class='answer   answerof-240967 ' value='955000'   \/><label for='answer-id-955000' id='answer-label-955000' class=' answer'><span>Configure mobile users with a service connection and trust-to-trust Security policy rules to allow the desired traffic outbound to the internet<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240967[]' id='answer-id-955001' class='answer   answerof-240967 ' value='955001'   \/><label for='answer-id-955001' id='answer-label-955001' class=' answer'><span>Configure remote networks with a service connection and trust-to-untrust Security policy rules to allow the desired traffic outbound to the internet<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240967[]' id='answer-id-955002' class='answer   answerof-240967 ' value='955002'   \/><label for='answer-id-955002' id='answer-label-955002' class=' answer'><span>Configure remote networks with trust-to-trust Security policy rules to allow the desired \r\ntraffic outbound to the internet<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-14' style=';'><div id='questionWrap-14'  class='   watupro-question-id-240968'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>14. <\/span>Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?<\/div><input type='hidden' name='question_id[]' id='qID_14' value='240968' \/><input type='hidden' id='answerType240968' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240968[]' id='answer-id-955003' class='answer   answerof-240968 ' value='955003'   \/><label for='answer-id-955003' id='answer-label-955003' class=' answer'><span>Measure and monitor the CPU consumption of the firewall data plane to ensure that each firewall is properly sized to support DoS and zone protection<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240968[]' id='answer-id-955004' class='answer   answerof-240968 ' value='955004'   \/><label for='answer-id-955004' id='answer-label-955004' class=' answer'><span>Create a zone protection profile with flood protection configured to defend an entire egress zone against SY<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240968[]' id='answer-id-955005' class='answer   answerof-240968 ' value='955005'   \/><label for='answer-id-955005' id='answer-label-955005' class=' answer'><span>ICMP ICMPv6, UD<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240968[]' id='answer-id-955006' class='answer   answerof-240968 ' value='955006'   \/><label for='answer-id-955006' id='answer-label-955006' class=' answer'><span>and other IP flood attacks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240968[]' id='answer-id-955007' class='answer   answerof-240968 ' value='955007'   \/><label for='answer-id-955007' id='answer-label-955007' class=' answer'><span>Add a WildFire subscription to activate DoS and zone protection features<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240968[]' id='answer-id-955008' class='answer   answerof-240968 ' value='955008'   \/><label for='answer-id-955008' id='answer-label-955008' class=' answer'><span>Replace the hardware firewall because DoS and zone protection are not available with VM-Series systems<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-15' style=';'><div id='questionWrap-15'  class='   watupro-question-id-240969'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>15. <\/span>What can be used to create dynamic address groups?<\/div><input type='hidden' name='question_id[]' id='qID_15' value='240969' \/><input type='hidden' id='answerType240969' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240969[]' id='answer-id-955009' class='answer   answerof-240969 ' value='955009'   \/><label for='answer-id-955009' id='answer-label-955009' class=' answer'><span>dynamic address<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240969[]' id='answer-id-955010' class='answer   answerof-240969 ' value='955010'   \/><label for='answer-id-955010' id='answer-label-955010' class=' answer'><span>region objects<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240969[]' id='answer-id-955011' class='answer   answerof-240969 ' value='955011'   \/><label for='answer-id-955011' id='answer-label-955011' class=' answer'><span>tags<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240969[]' id='answer-id-955012' class='answer   answerof-240969 ' value='955012'   \/><label for='answer-id-955012' id='answer-label-955012' class=' answer'><span>FODN addresses<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-16' style=';'><div id='questionWrap-16'  class='   watupro-question-id-240970'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>16. <\/span>An engineer is planning an SSL decryption implementation <br \/>\r<br>Which of the following statements is a best practice for SSL decryption?<\/div><input type='hidden' name='question_id[]' id='qID_16' value='240970' \/><input type='hidden' id='answerType240970' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240970[]' id='answer-id-955013' class='answer   answerof-240970 ' value='955013'   \/><label for='answer-id-955013' id='answer-label-955013' class=' answer'><span>Use the same Forward Trust certificate on all firewalls in the network.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240970[]' id='answer-id-955014' class='answer   answerof-240970 ' value='955014'   \/><label for='answer-id-955014' id='answer-label-955014' class=' answer'><span>Obtain a certificate from a publicly trusted root CA for the Forward Trust certificate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240970[]' id='answer-id-955015' class='answer   answerof-240970 ' value='955015'   \/><label for='answer-id-955015' id='answer-label-955015' class=' answer'><span>Obtain an enterprise CA-signed certificate for the Forward Trust certificate.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240970[]' id='answer-id-955016' class='answer   answerof-240970 ' value='955016'   \/><label for='answer-id-955016' id='answer-label-955016' class=' answer'><span>Use an enterprise CA-signed certificate for the Forward Untrust certificate.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-17' style=';'><div id='questionWrap-17'  class='   watupro-question-id-240971'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>17. <\/span>Which GlobalProtect component must be configured to enable Clientless VPN?<\/div><input type='hidden' name='question_id[]' id='qID_17' value='240971' \/><input type='hidden' id='answerType240971' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240971[]' id='answer-id-955017' class='answer   answerof-240971 ' value='955017'   \/><label for='answer-id-955017' id='answer-label-955017' class=' answer'><span>GlobalProtect satellite<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240971[]' id='answer-id-955018' class='answer   answerof-240971 ' value='955018'   \/><label for='answer-id-955018' id='answer-label-955018' class=' answer'><span>GlobalProtect app<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240971[]' id='answer-id-955019' class='answer   answerof-240971 ' value='955019'   \/><label for='answer-id-955019' id='answer-label-955019' class=' answer'><span>GlobalProtect portal<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240971[]' id='answer-id-955020' class='answer   answerof-240971 ' value='955020'   \/><label for='answer-id-955020' id='answer-label-955020' class=' answer'><span>GlobalProtect gateway<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-18' style=';'><div id='questionWrap-18'  class='   watupro-question-id-240972'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>18. <\/span>Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?<\/div><input type='hidden' name='question_id[]' id='qID_18' value='240972' \/><input type='hidden' id='answerType240972' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240972[]' id='answer-id-955021' class='answer   answerof-240972 ' value='955021'   \/><label for='answer-id-955021' id='answer-label-955021' class=' answer'><span>Measure and monitor the CPU consumption of the firewall data plane to ensure that each firewall is properly sized to support DoS and zone protection<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240972[]' id='answer-id-955022' class='answer   answerof-240972 ' value='955022'   \/><label for='answer-id-955022' id='answer-label-955022' class=' answer'><span>Create a zone protection profile with flood protection configured to defend an entire \r\negress zone against SY<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240972[]' id='answer-id-955023' class='answer   answerof-240972 ' value='955023'   \/><label for='answer-id-955023' id='answer-label-955023' class=' answer'><span>ICMP ICMPv6, UD<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240972[]' id='answer-id-955024' class='answer   answerof-240972 ' value='955024'   \/><label for='answer-id-955024' id='answer-label-955024' class=' answer'><span>and other IP flood attacks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240972[]' id='answer-id-955025' class='answer   answerof-240972 ' value='955025'   \/><label for='answer-id-955025' id='answer-label-955025' class=' answer'><span>Add a WildFire subscription to activate DoS and zone protection features<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240972[]' id='answer-id-955026' class='answer   answerof-240972 ' value='955026'   \/><label for='answer-id-955026' id='answer-label-955026' class=' answer'><span>Replace the hardware firewall because DoS and zone protection are not available with VM-Series systems<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-19' style=';'><div id='questionWrap-19'  class='   watupro-question-id-240973'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>19. <\/span>An administrator wants to enable WildFire inline machine learning. <br \/>\r<br>Which three file types does WildFire inline ML analyze? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_19' value='240973' \/><input type='hidden' id='answerType240973' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240973[]' id='answer-id-955027' class='answer   answerof-240973 ' value='955027'   \/><label for='answer-id-955027' id='answer-label-955027' class=' answer'><span>MS Office<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240973[]' id='answer-id-955028' class='answer   answerof-240973 ' value='955028'   \/><label for='answer-id-955028' id='answer-label-955028' class=' answer'><span>ELF<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240973[]' id='answer-id-955029' class='answer   answerof-240973 ' value='955029'   \/><label for='answer-id-955029' id='answer-label-955029' class=' answer'><span>APK<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240973[]' id='answer-id-955030' class='answer   answerof-240973 ' value='955030'   \/><label for='answer-id-955030' id='answer-label-955030' class=' answer'><span>VBscripts<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240973[]' id='answer-id-955031' class='answer   answerof-240973 ' value='955031'   \/><label for='answer-id-955031' id='answer-label-955031' class=' answer'><span>Powershell scripts<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-20' style=';'><div id='questionWrap-20'  class='   watupro-question-id-240974'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>20. <\/span>Which CLI command is used to determine how much disk space is allocated to logs?<\/div><input type='hidden' name='question_id[]' id='qID_20' value='240974' \/><input type='hidden' id='answerType240974' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240974[]' id='answer-id-955032' class='answer   answerof-240974 ' value='955032'   \/><label for='answer-id-955032' id='answer-label-955032' class=' answer'><span>show logging-status<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240974[]' id='answer-id-955033' class='answer   answerof-240974 ' value='955033'   \/><label for='answer-id-955033' id='answer-label-955033' class=' answer'><span>show system info<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240974[]' id='answer-id-955034' class='answer   answerof-240974 ' value='955034'   \/><label for='answer-id-955034' id='answer-label-955034' class=' answer'><span>debug log-receiver show<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240974[]' id='answer-id-955035' class='answer   answerof-240974 ' value='955035'   \/><label for='answer-id-955035' id='answer-label-955035' class=' answer'><span>show system logdfo-quota<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-21' style=';'><div id='questionWrap-21'  class='   watupro-question-id-240975'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>21. <\/span>Which statement best describes the Automated Commit Recovery feature?<\/div><input type='hidden' name='question_id[]' id='qID_21' value='240975' \/><input type='hidden' id='answerType240975' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240975[]' id='answer-id-955036' class='answer   answerof-240975 ' value='955036'   \/><label for='answer-id-955036' id='answer-label-955036' class=' answer'><span>It performs a connectivity check between the firewall and Panorama after every configuration commit on the firewall. It reverts the configuration changes on the firewall if the check fails.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240975[]' id='answer-id-955037' class='answer   answerof-240975 ' value='955037'   \/><label for='answer-id-955037' id='answer-label-955037' class=' answer'><span>It restores the running configuration on a firewall and Panorama if the last configuration commit fails.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240975[]' id='answer-id-955038' class='answer   answerof-240975 ' value='955038'   \/><label for='answer-id-955038' id='answer-label-955038' class=' answer'><span>It performs a connectivity check between the firewall and Panorama after every configuration commit on the firewall. It reverts the configuration changes on the firewall and on Panorama if the check fails.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240975[]' id='answer-id-955039' class='answer   answerof-240975 ' value='955039'   \/><label for='answer-id-955039' id='answer-label-955039' class=' answer'><span>It restores the running configuration on a firewall if the last configuration commit fails.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-22' style=';'><div id='questionWrap-22'  class='   watupro-question-id-240976'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>22. <\/span>Cortex XDR notifies an administrator about grayware on the endpoints. There are no entries about grayware in any of the logs of the corresponding firewall. <br \/>\r<br>Which setting can the administrator configure on the firewall to log grayware verdicts?<\/div><input type='hidden' name='question_id[]' id='qID_22' value='240976' \/><input type='hidden' id='answerType240976' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240976[]' id='answer-id-955040' class='answer   answerof-240976 ' value='955040'   \/><label for='answer-id-955040' id='answer-label-955040' class=' answer'><span>within the log forwarding profile attached to the Security policy rule<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240976[]' id='answer-id-955041' class='answer   answerof-240976 ' value='955041'   \/><label for='answer-id-955041' id='answer-label-955041' class=' answer'><span>within the log settings option in the Device tab<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240976[]' id='answer-id-955042' class='answer   answerof-240976 ' value='955042'   \/><label for='answer-id-955042' id='answer-label-955042' class=' answer'><span>in WildFire General Settings, select &quot;Report Grayware Files&quot;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240976[]' id='answer-id-955043' class='answer   answerof-240976 ' value='955043'   \/><label for='answer-id-955043' id='answer-label-955043' class=' answer'><span>in Threat General Settings, select &quot;Report Grayware Files&quot;<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-23' style=';'><div id='questionWrap-23'  class='   watupro-question-id-240977'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>23. <\/span>Which three actions can Panorama perform when deploying PAN-OS images to its managed devices? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_23' value='240977' \/><input type='hidden' id='answerType240977' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240977[]' id='answer-id-955044' class='answer   answerof-240977 ' value='955044'   \/><label for='answer-id-955044' id='answer-label-955044' class=' answer'><span>upload-only<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240977[]' id='answer-id-955045' class='answer   answerof-240977 ' value='955045'   \/><label for='answer-id-955045' id='answer-label-955045' class=' answer'><span>upload and install and reboot<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240977[]' id='answer-id-955046' class='answer   answerof-240977 ' value='955046'   \/><label for='answer-id-955046' id='answer-label-955046' class=' answer'><span>verify and install<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240977[]' id='answer-id-955047' class='answer   answerof-240977 ' value='955047'   \/><label for='answer-id-955047' id='answer-label-955047' class=' answer'><span>upload and install<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240977[]' id='answer-id-955048' class='answer   answerof-240977 ' value='955048'   \/><label for='answer-id-955048' id='answer-label-955048' class=' answer'><span>install and reboot<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-24' style=';'><div id='questionWrap-24'  class='   watupro-question-id-240978'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>24. <\/span>A bootstrap USB flash drive has been prepared using a Windows workstation to load the initial configuration of a Palo Alto Networks firewall that was previously being used in a lab. The USB flash drive was formatted using file system FAT32 and the initial configuration is stored in a file named init-cfg txt. The firewall is currently running PAN-OS 10.0 and using a lab config. <br \/>\r<br>The contents of init-cfg txi in the USB flash drive are as follows: <br \/>\r<br><br><img decoding=\"async\" width=276 height=316 id=\"\u56fe\u7247 167\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2022\/11\/image001-5.jpg\"><br><br \/>\r<br>The USB flash drive has been inserted in the firewalls' USB port, and the firewall has been restarted using command:&gt; request resort system Upon restart, the firewall fails to begin the bootstrapping process. The failure is caused because<\/div><input type='hidden' name='question_id[]' id='qID_24' value='240978' \/><input type='hidden' id='answerType240978' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240978[]' id='answer-id-955049' class='answer   answerof-240978 ' value='955049'   \/><label for='answer-id-955049' id='answer-label-955049' class=' answer'><span>Firewall must be in factory default state or have all private data deleted for bootstrapping<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240978[]' id='answer-id-955050' class='answer   answerof-240978 ' value='955050'   \/><label for='answer-id-955050' id='answer-label-955050' class=' answer'><span>The hostname is a required parameter, but it is missing in init-cfg txt<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240978[]' id='answer-id-955051' class='answer   answerof-240978 ' value='955051'   \/><label for='answer-id-955051' id='answer-label-955051' class=' answer'><span>The USB must be formatted using the ext3 file system, FAT32 is not supported<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240978[]' id='answer-id-955052' class='answer   answerof-240978 ' value='955052'   \/><label for='answer-id-955052' id='answer-label-955052' class=' answer'><span>PANOS version must be 91.x at a minimum but the firewall is running 10.0.x<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240978[]' id='answer-id-955053' class='answer   answerof-240978 ' value='955053'   \/><label for='answer-id-955053' id='answer-label-955053' class=' answer'><span>The bootstrap.xml file is a required file but it is missing<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-25' style=';'><div id='questionWrap-25'  class='   watupro-question-id-240979'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>25. <\/span>Which Panorama mode should be used so that all logs are sent to, and only stored in. Cortex Data Lake?<\/div><input type='hidden' name='question_id[]' id='qID_25' value='240979' \/><input type='hidden' id='answerType240979' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240979[]' id='answer-id-955054' class='answer   answerof-240979 ' value='955054'   \/><label for='answer-id-955054' id='answer-label-955054' class=' answer'><span>Legacy<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240979[]' id='answer-id-955055' class='answer   answerof-240979 ' value='955055'   \/><label for='answer-id-955055' id='answer-label-955055' class=' answer'><span>Log Collector<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240979[]' id='answer-id-955056' class='answer   answerof-240979 ' value='955056'   \/><label for='answer-id-955056' id='answer-label-955056' class=' answer'><span>Panorama<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240979[]' id='answer-id-955057' class='answer   answerof-240979 ' value='955057'   \/><label for='answer-id-955057' id='answer-label-955057' class=' answer'><span>Management Only<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-26' style=';'><div id='questionWrap-26'  class='   watupro-question-id-240980'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>26. <\/span>What is the best description of the HA4 Keep-Alive Threshold (ms)?<\/div><input type='hidden' name='question_id[]' id='qID_26' value='240980' \/><input type='hidden' id='answerType240980' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240980[]' id='answer-id-955058' class='answer   answerof-240980 ' value='955058'   \/><label for='answer-id-955058' id='answer-label-955058' class=' answer'><span>the maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240980[]' id='answer-id-955059' class='answer   answerof-240980 ' value='955059'   \/><label for='answer-id-955059' id='answer-label-955059' class=' answer'><span>The time that a passive or active-secondary firewall will wait before taking over as the active or active-primary firewall<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240980[]' id='answer-id-955060' class='answer   answerof-240980 ' value='955060'   \/><label for='answer-id-955060' id='answer-label-955060' class=' answer'><span>the timeframe within which the firewall must receive keepalives from a cluster member to know that the cluster member is functional.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240980[]' id='answer-id-955061' class='answer   answerof-240980 ' value='955061'   \/><label for='answer-id-955061' id='answer-label-955061' class=' answer'><span>The timeframe that the local firewall wait before going to Active state when another cluster member is preventing the cluster from fully synchronizing.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-27' style=';'><div id='questionWrap-27'  class='   watupro-question-id-240981'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>27. <\/span>Which configuration task is best for reducing load on the management plane?<\/div><input type='hidden' name='question_id[]' id='qID_27' value='240981' \/><input type='hidden' id='answerType240981' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240981[]' id='answer-id-955062' class='answer   answerof-240981 ' value='955062'   \/><label for='answer-id-955062' id='answer-label-955062' class=' answer'><span>Disable logging on the default deny rule<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240981[]' id='answer-id-955063' class='answer   answerof-240981 ' value='955063'   \/><label for='answer-id-955063' id='answer-label-955063' class=' answer'><span>Enable session logging at start<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240981[]' id='answer-id-955064' class='answer   answerof-240981 ' value='955064'   \/><label for='answer-id-955064' id='answer-label-955064' class=' answer'><span>Disable pre-defined reports<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240981[]' id='answer-id-955065' class='answer   answerof-240981 ' value='955065'   \/><label for='answer-id-955065' id='answer-label-955065' class=' answer'><span>Set the URL filtering action to send alerts<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-28' style=';'><div id='questionWrap-28'  class='   watupro-question-id-240982'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>28. <\/span>When you navigate to Network: &gt; GlobalProtect &gt; Portals &gt; Method section, which three options are available? (Choose three)<\/div><input type='hidden' name='question_id[]' id='qID_28' value='240982' \/><input type='hidden' id='answerType240982' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240982[]' id='answer-id-955066' class='answer   answerof-240982 ' value='955066'   \/><label for='answer-id-955066' id='answer-label-955066' class=' answer'><span>user-logon (always on)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240982[]' id='answer-id-955067' class='answer   answerof-240982 ' value='955067'   \/><label for='answer-id-955067' id='answer-label-955067' class=' answer'><span>pre-logon then on-demand<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240982[]' id='answer-id-955068' class='answer   answerof-240982 ' value='955068'   \/><label for='answer-id-955068' id='answer-label-955068' class=' answer'><span>on-demand (manual user initiated connection)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240982[]' id='answer-id-955069' class='answer   answerof-240982 ' value='955069'   \/><label for='answer-id-955069' id='answer-label-955069' class=' answer'><span>post-logon (always on)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240982[]' id='answer-id-955070' class='answer   answerof-240982 ' value='955070'   \/><label for='answer-id-955070' id='answer-label-955070' class=' answer'><span>certificate-logon<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-29' style=';'><div id='questionWrap-29'  class='   watupro-question-id-240983'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>29. <\/span>SAML SLO is supported for which two firewall features? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_29' value='240983' \/><input type='hidden' id='answerType240983' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240983[]' id='answer-id-955071' class='answer   answerof-240983 ' value='955071'   \/><label for='answer-id-955071' id='answer-label-955071' class=' answer'><span>GlobalProtect Portal<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240983[]' id='answer-id-955072' class='answer   answerof-240983 ' value='955072'   \/><label for='answer-id-955072' id='answer-label-955072' class=' answer'><span>CaptivePortal<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240983[]' id='answer-id-955073' class='answer   answerof-240983 ' value='955073'   \/><label for='answer-id-955073' id='answer-label-955073' class=' answer'><span>WebUI<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240983[]' id='answer-id-955074' class='answer   answerof-240983 ' value='955074'   \/><label for='answer-id-955074' id='answer-label-955074' class=' answer'><span>CLI<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-30' style=';'><div id='questionWrap-30'  class='   watupro-question-id-240984'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>30. <\/span>A network security engineer must implement Quality of Service policies to ensure specific levels of delivery guarantees for various applications in the environment They want to ensure that they know as much as they can about QoS before deploying. <br \/>\r<br>Which statement about the QoS feature is correct?<\/div><input type='hidden' name='question_id[]' id='qID_30' value='240984' \/><input type='hidden' id='answerType240984' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240984[]' id='answer-id-955075' class='answer   answerof-240984 ' value='955075'   \/><label for='answer-id-955075' id='answer-label-955075' class=' answer'><span>QoS is only supported on firewalls that have a single virtual system configured<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240984[]' id='answer-id-955076' class='answer   answerof-240984 ' value='955076'   \/><label for='answer-id-955076' id='answer-label-955076' class=' answer'><span>QoS can be used in conjunction with SSL decryption<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240984[]' id='answer-id-955077' class='answer   answerof-240984 ' value='955077'   \/><label for='answer-id-955077' id='answer-label-955077' class=' answer'><span>QoS is only supported on hardware firewalls<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240984[]' id='answer-id-955078' class='answer   answerof-240984 ' value='955078'   \/><label for='answer-id-955078' id='answer-label-955078' class=' answer'><span>QoS can be used on firewalls with multiple virtual systems configured<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-31' style=';'><div id='questionWrap-31'  class='   watupro-question-id-240985'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>31. <\/span>An administrator is building Security rules within a device group to block traffic to and from malicious locations <br \/>\r<br>How should those rules be configured to ensure that they are evaluated with a high priority?<\/div><input type='hidden' name='question_id[]' id='qID_31' value='240985' \/><input type='hidden' id='answerType240985' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240985[]' id='answer-id-955079' class='answer   answerof-240985 ' value='955079'   \/><label for='answer-id-955079' id='answer-label-955079' class=' answer'><span>Create the appropriate rules with a Block action and apply them at the top of the Default Rules<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240985[]' id='answer-id-955080' class='answer   answerof-240985 ' value='955080'   \/><label for='answer-id-955080' id='answer-label-955080' class=' answer'><span>Create the appropriate rules with a Block action and apply them at the top of the Security Post-Rules.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240985[]' id='answer-id-955081' class='answer   answerof-240985 ' value='955081'   \/><label for='answer-id-955081' id='answer-label-955081' class=' answer'><span>Create the appropriate rules with a Block action and apply them at the top of the local firewall Security rules.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240985[]' id='answer-id-955082' class='answer   answerof-240985 ' value='955082'   \/><label for='answer-id-955082' id='answer-label-955082' class=' answer'><span>Create the appropriate rules with a Block action and apply them at the top of the Security Pre-Rules<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-32' style=';'><div id='questionWrap-32'  class='   watupro-question-id-240986'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>32. <\/span>A firewall administrator needs to be able to inspect inbound HTTPS traffic on servers hosted in their DMZ to prevent the hosted service from being exploited. <br \/>\r<br>Which combination of features can allow PAN-OS to detect exploit traffic in a session with TLS encapsulation?<\/div><input type='hidden' name='question_id[]' id='qID_32' value='240986' \/><input type='hidden' id='answerType240986' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240986[]' id='answer-id-955083' class='answer   answerof-240986 ' value='955083'   \/><label for='answer-id-955083' id='answer-label-955083' class=' answer'><span>Decryption policy and a Data Filtering profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240986[]' id='answer-id-955084' class='answer   answerof-240986 ' value='955084'   \/><label for='answer-id-955084' id='answer-label-955084' class=' answer'><span>a WildFire profile and a File Blocking profile<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240986[]' id='answer-id-955085' class='answer   answerof-240986 ' value='955085'   \/><label for='answer-id-955085' id='answer-label-955085' class=' answer'><span>Vulnerability Protection profile and a Decryption policy<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240986[]' id='answer-id-955086' class='answer   answerof-240986 ' value='955086'   \/><label for='answer-id-955086' id='answer-label-955086' class=' answer'><span>a Vulnerability Protection profile and a QoS policy<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-33' style=';'><div id='questionWrap-33'  class='   watupro-question-id-240987'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>33. <\/span>You have upgraded Panorama to 10.2 and need to upgrade six Log Collectors. <br \/>\r<br>When upgrading Log Collectors to 10.2, you must do what?<\/div><input type='hidden' name='question_id[]' id='qID_33' value='240987' \/><input type='hidden' id='answerType240987' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240987[]' id='answer-id-955087' class='answer   answerof-240987 ' value='955087'   \/><label for='answer-id-955087' id='answer-label-955087' class=' answer'><span>Upgrade the Log Collectors one at a time.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240987[]' id='answer-id-955088' class='answer   answerof-240987 ' value='955088'   \/><label for='answer-id-955088' id='answer-label-955088' class=' answer'><span>Add Panorama Administrators to each Managed Collector.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240987[]' id='answer-id-955089' class='answer   answerof-240987 ' value='955089'   \/><label for='answer-id-955089' id='answer-label-955089' class=' answer'><span>Add a Global Authentication Profile to each Managed Collector.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240987[]' id='answer-id-955090' class='answer   answerof-240987 ' value='955090'   \/><label for='answer-id-955090' id='answer-label-955090' class=' answer'><span>Upgrade all the Log Collectors at the same time.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-34' style=';'><div id='questionWrap-34'  class='   watupro-question-id-240988'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>34. <\/span>What is the best description of the HA4 Keep-Alive Threshold (ms)?<\/div><input type='hidden' name='question_id[]' id='qID_34' value='240988' \/><input type='hidden' id='answerType240988' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240988[]' id='answer-id-955091' class='answer   answerof-240988 ' value='955091'   \/><label for='answer-id-955091' id='answer-label-955091' class=' answer'><span>the maximum interval between hello packets that are sent to verify that the HA functionality on the other firewall is operational.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240988[]' id='answer-id-955092' class='answer   answerof-240988 ' value='955092'   \/><label for='answer-id-955092' id='answer-label-955092' class=' answer'><span>The time that a passive or active-secondary firewall will wait before taking over as the active or active-primary firewall<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240988[]' id='answer-id-955093' class='answer   answerof-240988 ' value='955093'   \/><label for='answer-id-955093' id='answer-label-955093' class=' answer'><span>the timeframe within which the firewall must receive keepalives from a cluster member to know that the cluster member is functional.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240988[]' id='answer-id-955094' class='answer   answerof-240988 ' value='955094'   \/><label for='answer-id-955094' id='answer-label-955094' class=' answer'><span>The timeframe that the local firewall wait before going to Active state when another cluster member is preventing the cluster from fully synchronizing.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-35' style=';'><div id='questionWrap-35'  class='   watupro-question-id-240989'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>35. <\/span>Which three use cases are valid reasons for requiring an Active\/Active high availability deployment? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_35' value='240989' \/><input type='hidden' id='answerType240989' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240989[]' id='answer-id-955095' class='answer   answerof-240989 ' value='955095'   \/><label for='answer-id-955095' id='answer-label-955095' class=' answer'><span>The environment requires real, full-time redundancy from both firewalls at all times<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240989[]' id='answer-id-955096' class='answer   answerof-240989 ' value='955096'   \/><label for='answer-id-955096' id='answer-label-955096' class=' answer'><span>The environment requires Layer 2 interfaces in the deployment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240989[]' id='answer-id-955097' class='answer   answerof-240989 ' value='955097'   \/><label for='answer-id-955097' id='answer-label-955097' class=' answer'><span>The environment requires that both firewalls maintain their own routing tables for faster dynamic routing protocol convergence<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240989[]' id='answer-id-955098' class='answer   answerof-240989 ' value='955098'   \/><label for='answer-id-955098' id='answer-label-955098' class=' answer'><span>The environment requires that all configuration must be fully synchronized between both members of the HA pair<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240989[]' id='answer-id-955099' class='answer   answerof-240989 ' value='955099'   \/><label for='answer-id-955099' id='answer-label-955099' class=' answer'><span>The environment requires that traffic be load-balanced across both firewalls to handle peak traffic spikes<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-36' style=';'><div id='questionWrap-36'  class='   watupro-question-id-240990'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>36. <\/span>The Aggregate Ethernet interface is showing down on a passive PA-7050 firewall of an active\/passive HA pair. The HA Passive Link State is set to &quot;Auto&quot; under Device &gt; High Availability &gt; General &gt; Active\/Passive Settings. The AE interface is configured with LACP enabled and is up only on the active firewall. <br \/>\r<br>Why is the AE interface showing down on the passive firewall?<\/div><input type='hidden' name='question_id[]' id='qID_36' value='240990' \/><input type='hidden' id='answerType240990' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240990[]' id='answer-id-955100' class='answer   answerof-240990 ' value='955100'   \/><label for='answer-id-955100' id='answer-label-955100' class=' answer'><span>It does not perform pre-negotiation LACP unless &quot;Enable in HA Passive State&quot; is selected under the High Availability Options on the LACP tab of the AE Interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240990[]' id='answer-id-955101' class='answer   answerof-240990 ' value='955101'   \/><label for='answer-id-955101' id='answer-label-955101' class=' answer'><span>It does not participate in LACP negotiation unless Fast Failover is selected under the Enable LACP selection on the LACP tab of the AE Interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240990[]' id='answer-id-955102' class='answer   answerof-240990 ' value='955102'   \/><label for='answer-id-955102' id='answer-label-955102' class=' answer'><span>It participates in LACP negotiation when Fast is selected for Transmission Rate under the Enable LACP selection on the LACP tab of the AE Interface.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240990[]' id='answer-id-955103' class='answer   answerof-240990 ' value='955103'   \/><label for='answer-id-955103' id='answer-label-955103' class=' answer'><span>It performs pre-negotiation of LACP when the mode Passive is selected under the Enable LACP selection on the LACP tab of the AE Interface.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-37' style=';'><div id='questionWrap-37'  class='   watupro-question-id-240991'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>37. <\/span>Which three items are import considerations during SD-WAN configuration planning? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_37' value='240991' \/><input type='hidden' id='answerType240991' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240991[]' id='answer-id-955104' class='answer   answerof-240991 ' value='955104'   \/><label for='answer-id-955104' id='answer-label-955104' class=' answer'><span>link requirements<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240991[]' id='answer-id-955105' class='answer   answerof-240991 ' value='955105'   \/><label for='answer-id-955105' id='answer-label-955105' class=' answer'><span>the name of the ISP<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240991[]' id='answer-id-955106' class='answer   answerof-240991 ' value='955106'   \/><label for='answer-id-955106' id='answer-label-955106' class=' answer'><span>IP Addresses<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240991[]' id='answer-id-955107' class='answer   answerof-240991 ' value='955107'   \/><label for='answer-id-955107' id='answer-label-955107' class=' answer'><span>branch and hub locations<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-38' style=';'><div id='questionWrap-38'  class='   watupro-question-id-240992'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>38. <\/span>An administrator has configured a pair of firewalls using high availability in Active\/Passive mode. Link and Path Monitoring Is enabled with the Failure Condition set to &quot;any.&quot; There is one link group configured containing member interfaces ethernet1\/1 and ethernet1\/2 with a Group Failure Condition set to &quot;all.&quot; <br \/>\r<br>Which HA state will the Active firewall go into if ethernet1\/1 link goes down due to a failure?<\/div><input type='hidden' name='question_id[]' id='qID_38' value='240992' \/><input type='hidden' id='answerType240992' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240992[]' id='answer-id-955108' class='answer   answerof-240992 ' value='955108'   \/><label for='answer-id-955108' id='answer-label-955108' class=' answer'><span>Non-functional<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240992[]' id='answer-id-955109' class='answer   answerof-240992 ' value='955109'   \/><label for='answer-id-955109' id='answer-label-955109' class=' answer'><span>Passive<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240992[]' id='answer-id-955110' class='answer   answerof-240992 ' value='955110'   \/><label for='answer-id-955110' id='answer-label-955110' class=' answer'><span>Active-Secondary<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240992[]' id='answer-id-955111' class='answer   answerof-240992 ' value='955111'   \/><label for='answer-id-955111' id='answer-label-955111' class=' answer'><span>Active<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-39' style=';'><div id='questionWrap-39'  class='   watupro-question-id-240993'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>39. <\/span>What are three reasons for excluding a site from SSL decryption? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_39' value='240993' \/><input type='hidden' id='answerType240993' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240993[]' id='answer-id-955112' class='answer   answerof-240993 ' value='955112'   \/><label for='answer-id-955112' id='answer-label-955112' class=' answer'><span>the website is not present in English<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240993[]' id='answer-id-955113' class='answer   answerof-240993 ' value='955113'   \/><label for='answer-id-955113' id='answer-label-955113' class=' answer'><span>unsupported ciphers<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240993[]' id='answer-id-955114' class='answer   answerof-240993 ' value='955114'   \/><label for='answer-id-955114' id='answer-label-955114' class=' answer'><span>certificate pinning<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240993[]' id='answer-id-955115' class='answer   answerof-240993 ' value='955115'   \/><label for='answer-id-955115' id='answer-label-955115' class=' answer'><span>unsupported browser version<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240993[]' id='answer-id-955116' class='answer   answerof-240993 ' value='955116'   \/><label for='answer-id-955116' id='answer-label-955116' class=' answer'><span>mutual authentication<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-40' style=';'><div id='questionWrap-40'  class='   watupro-question-id-240994'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>40. <\/span>Which configuration is backed up using the Scheduled Config Export feature in Panorama?<\/div><input type='hidden' name='question_id[]' id='qID_40' value='240994' \/><input type='hidden' id='answerType240994' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240994[]' id='answer-id-955117' class='answer   answerof-240994 ' value='955117'   \/><label for='answer-id-955117' id='answer-label-955117' class=' answer'><span>Panorama running configuration<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240994[]' id='answer-id-955118' class='answer   answerof-240994 ' value='955118'   \/><label for='answer-id-955118' id='answer-label-955118' class=' answer'><span>Panorama candidate configuration<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240994[]' id='answer-id-955119' class='answer   answerof-240994 ' value='955119'   \/><label for='answer-id-955119' id='answer-label-955119' class=' answer'><span>Panorama candidate configuration and candidate configuration of all managed devices<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240994[]' id='answer-id-955120' class='answer   answerof-240994 ' value='955120'   \/><label for='answer-id-955120' id='answer-label-955120' class=' answer'><span>Panorama running configuration and running configuration of all managed devices<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-41' style=';'><div id='questionWrap-41'  class='   watupro-question-id-240995'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>41. <\/span>What happens when an A\/P firewall cluster synchronies IPsec tunnel security associations (SAs)?<\/div><input type='hidden' name='question_id[]' id='qID_41' value='240995' \/><input type='hidden' id='answerType240995' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240995[]' id='answer-id-955121' class='answer   answerof-240995 ' value='955121'   \/><label for='answer-id-955121' id='answer-label-955121' class=' answer'><span>Phase 2 SAs are synchronized over HA2 links<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240995[]' id='answer-id-955122' class='answer   answerof-240995 ' value='955122'   \/><label for='answer-id-955122' id='answer-label-955122' class=' answer'><span>Phase 1 and Phase 2 SAs are synchronized over HA2 links<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240995[]' id='answer-id-955123' class='answer   answerof-240995 ' value='955123'   \/><label for='answer-id-955123' id='answer-label-955123' class=' answer'><span>Phase 1 SAs are synchronized over HA1 links<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240995[]' id='answer-id-955124' class='answer   answerof-240995 ' value='955124'   \/><label for='answer-id-955124' id='answer-label-955124' class=' answer'><span>Phase 1 and Phase 2 SAs are synchronized over HA3 links<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-42' style=';'><div id='questionWrap-42'  class='   watupro-question-id-240996'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>42. <\/span>A firewall should be advertising the static route 10.2.0.0\/24 Into OSPF. The configuration on the neighbor is correct, but the route is not in the neighbor's routing table. <br \/>\r<br>Which two configurations should you check on the firewall? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_42' value='240996' \/><input type='hidden' id='answerType240996' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240996[]' id='answer-id-955125' class='answer   answerof-240996 ' value='955125'   \/><label for='answer-id-955125' id='answer-label-955125' class=' answer'><span>In the OSFP configuration, ensure that the correct redistribution profile is selected in the OSPF Export Rules section.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240996[]' id='answer-id-955126' class='answer   answerof-240996 ' value='955126'   \/><label for='answer-id-955126' id='answer-label-955126' class=' answer'><span>Within the redistribution profile ensure that Redist is selected.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240996[]' id='answer-id-955127' class='answer   answerof-240996 ' value='955127'   \/><label for='answer-id-955127' id='answer-label-955127' class=' answer'><span>Ensure that the OSPF neighbor state Is &quot;2-Way.&quot;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240996[]' id='answer-id-955128' class='answer   answerof-240996 ' value='955128'   \/><label for='answer-id-955128' id='answer-label-955128' class=' answer'><span>In the redistribution profile check that the source type is set to &quot;ospf.&quot;<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-43' style=';'><div id='questionWrap-43'  class='   watupro-question-id-240997'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>43. <\/span>An engineer is pushing configuration from Panorama lo a managed firewall. <br \/>\r<br>What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?<\/div><input type='hidden' name='question_id[]' id='qID_43' value='240997' \/><input type='hidden' id='answerType240997' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240997[]' id='answer-id-955129' class='answer   answerof-240997 ' value='955129'   \/><label for='answer-id-955129' id='answer-label-955129' class=' answer'><span>The firewall rejects the pushed configuration, and the commit fails.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240997[]' id='answer-id-955130' class='answer   answerof-240997 ' value='955130'   \/><label for='answer-id-955130' id='answer-label-955130' class=' answer'><span>The firewall renames the duplicate local objects with &quot;-1&quot; at the end signifying they are clones; it will update the references to the objects accordingly and fully commit the pushed configuration.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240997[]' id='answer-id-955131' class='answer   answerof-240997 ' value='955131'   \/><label for='answer-id-955131' id='answer-label-955131' class=' answer'><span>The firewall fully commits all of the pushed configuration and overwrites its locally configured objects<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240997[]' id='answer-id-955132' class='answer   answerof-240997 ' value='955132'   \/><label for='answer-id-955132' id='answer-label-955132' class=' answer'><span>The firewall ignores only the pushed objects that have the same name as the locally configured objects, and it will commit the rest of the pushed configuration.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-44' style=';'><div id='questionWrap-44'  class='   watupro-question-id-240998'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>44. <\/span>An administrator wants multiple web servers In the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80\/TCP needs to be forwarded to the server at 10.1.1.22. <br \/>\r<br><br><img decoding=\"async\" width=269 height=269 id=\"\u56fe\u7247 209\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2022\/11\/image002-5.jpg\"><br><br \/>\r<br>Based on the image, which NAT rule will forward web-browsing traffic correctly? <br \/>\r<br>A) <br \/>\r<br><br><img decoding=\"async\" width=173 height=124 id=\"\u56fe\u7247 211\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2022\/11\/image003-3.jpg\"><br><br \/>\r<br>B) <br \/>\r<br><br><img decoding=\"async\" width=173 height=124 id=\"\u56fe\u7247 213\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2022\/11\/image004-3.jpg\"><br><br \/>\r<br>C) <br \/>\r<br><br><img decoding=\"async\" width=173 height=123 id=\"\u56fe\u7247 215\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2022\/11\/image005-3.jpg\"><br><br \/>\r<br>D) <br \/>\r<br><br><img decoding=\"async\" width=173 height=123 id=\"\u56fe\u7247 217\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2022\/11\/image006-3.jpg\"><br><\/div><input type='hidden' name='question_id[]' id='qID_44' value='240998' \/><input type='hidden' id='answerType240998' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240998[]' id='answer-id-955133' class='answer   answerof-240998 ' value='955133'   \/><label for='answer-id-955133' id='answer-label-955133' class=' answer'><span>Option<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240998[]' id='answer-id-955134' class='answer   answerof-240998 ' value='955134'   \/><label for='answer-id-955134' id='answer-label-955134' class=' answer'><span>Option<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240998[]' id='answer-id-955135' class='answer   answerof-240998 ' value='955135'   \/><label for='answer-id-955135' id='answer-label-955135' class=' answer'><span>Option<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-240998[]' id='answer-id-955136' class='answer   answerof-240998 ' value='955136'   \/><label for='answer-id-955136' id='answer-label-955136' class=' answer'><span>Option<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-45' style=';'><div id='questionWrap-45'  class='   watupro-question-id-240999'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>45. <\/span>A network engineer has discovered that asymmetric routing is causing a Palo Alto Networks firewall to drop traffic. The network architecture cannot be changed to correct this. <br \/>\r<br>Which two actions can be taken on the firewall to allow the dropped traffic permanently? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_45' value='240999' \/><input type='hidden' id='answerType240999' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240999[]' id='answer-id-955137' class='answer   answerof-240999 ' value='955137'   \/><label for='answer-id-955137' id='answer-label-955137' class=' answer'><span>Navigate to Network &gt; Zone Protection Click Add \r\nSelect Packet Based Attack Protection &gt; TCP\/IP Drop Set &quot;Reject Non-syn-TCP&quot; to No Set &quot;Asymmetric Path&quot; to Bypass<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240999[]' id='answer-id-955138' class='answer   answerof-240999 ' value='955138'   \/><label for='answer-id-955138' id='answer-label-955138' class=' answer'><span>&gt; set session tcp-reject-non-syn no<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240999[]' id='answer-id-955139' class='answer   answerof-240999 ' value='955139'   \/><label for='answer-id-955139' id='answer-label-955139' class=' answer'><span>Navigate to Network &gt; Zone Protection Click Add \r\nSelect Packet Based Attack Protection &gt; TCP\/IP Drop Set &quot;Reject Non-syn-TCP&quot; to Global \r\nSet &quot;Asymmetric Path&quot; to Global<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-240999[]' id='answer-id-955140' class='answer   answerof-240999 ' value='955140'   \/><label for='answer-id-955140' id='answer-label-955140' class=' answer'><span># set deviceconfig setting session tcp-reject-non-syn no<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-46' style=';'><div id='questionWrap-46'  class='   watupro-question-id-241000'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>46. <\/span>A network-security engineer attempted to configure a bootstrap package on Microsoft Azure, but the virtual machine provisioning process failed. In reviewing the bootstrap package, the engineer only had the following directories: \/config, \/license and \/software <br \/>\r<br>Why did the bootstrap process fail for the VM-Series firewall in Azure?<\/div><input type='hidden' name='question_id[]' id='qID_46' value='241000' \/><input type='hidden' id='answerType241000' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241000[]' id='answer-id-955141' class='answer   answerof-241000 ' value='955141'   \/><label for='answer-id-955141' id='answer-label-955141' class=' answer'><span>All public cloud deployments require the \/plugins folder to support proper firewall native integrations<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241000[]' id='answer-id-955142' class='answer   answerof-241000 ' value='955142'   \/><label for='answer-id-955142' id='answer-label-955142' class=' answer'><span>The \/content folder is missing from the bootstrap package<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241000[]' id='answer-id-955143' class='answer   answerof-241000 ' value='955143'   \/><label for='answer-id-955143' id='answer-label-955143' class=' answer'><span>The VM-Series firewall was not pre-registered in Panorama and prevented the bootstrap process from successfully completing<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241000[]' id='answer-id-955144' class='answer   answerof-241000 ' value='955144'   \/><label for='answer-id-955144' id='answer-label-955144' class=' answer'><span>The \/config or \/software folders were missing mandatory files to successfully bootstrap<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-47' style=';'><div id='questionWrap-47'  class='   watupro-question-id-241001'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>47. <\/span>When an in-band data port is set up to provide access to required services, what is required for an interface that is assigned to service routes?<\/div><input type='hidden' name='question_id[]' id='qID_47' value='241001' \/><input type='hidden' id='answerType241001' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241001[]' id='answer-id-955145' class='answer   answerof-241001 ' value='955145'   \/><label for='answer-id-955145' id='answer-label-955145' class=' answer'><span>The interface must be used for traffic to the required services<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241001[]' id='answer-id-955146' class='answer   answerof-241001 ' value='955146'   \/><label for='answer-id-955146' id='answer-label-955146' class=' answer'><span>You must enable DoS and zone protection<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241001[]' id='answer-id-955147' class='answer   answerof-241001 ' value='955147'   \/><label for='answer-id-955147' id='answer-label-955147' class=' answer'><span>You must set the interface to Layer 2 Layer 3. or virtual wire<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241001[]' id='answer-id-955148' class='answer   answerof-241001 ' value='955148'   \/><label for='answer-id-955148' id='answer-label-955148' class=' answer'><span>You must use a static IP address<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-48' style=';'><div id='questionWrap-48'  class='   watupro-question-id-241002'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>48. <\/span>A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443 A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server hosts its contents over HTTP(S). Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule. <br \/>\r<br>Which combination of service and application, and order of Security policy rules, needs to be configured to allow cJeartext web-browsing traffic to this server on tcp\/443?<\/div><input type='hidden' name='question_id[]' id='qID_48' value='241002' \/><input type='hidden' id='answerType241002' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241002[]' id='answer-id-955149' class='answer   answerof-241002 ' value='955149'   \/><label for='answer-id-955149' id='answer-label-955149' class=' answer'><span>Rule #1 application: web-browsing; service application-default; action: allow \r\nRule #2 application: ssl; service: application-default; action: allow<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241002[]' id='answer-id-955150' class='answer   answerof-241002 ' value='955150'   \/><label for='answer-id-955150' id='answer-label-955150' class=' answer'><span>Rule #1: application; web-browsing; service: service-https; action: allow \r\nRule #2 application: ssl; service: application-default, action: allow<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241002[]' id='answer-id-955151' class='answer   answerof-241002 ' value='955151'   \/><label for='answer-id-955151' id='answer-label-955151' class=' answer'><span>Rule #1: application: web-browsing; service: service-http; action: allow \r\nRule #2: application: ssl; service: application-default; action: allow<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241002[]' id='answer-id-955152' class='answer   answerof-241002 ' value='955152'   \/><label for='answer-id-955152' id='answer-label-955152' class=' answer'><span>Rule tf1 application: ssl; service: application-default; action: allow \r\nRule #2 application; web-browsing; service application-default; action: allow<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-49' style=';'><div id='questionWrap-49'  class='   watupro-question-id-241003'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>49. <\/span>While analyzing the Traffic log, you see that some entries show &quot;unknown-tcp&quot; in the Application column. <br \/>\r<br>What best explains these occurrences?<\/div><input type='hidden' name='question_id[]' id='qID_49' value='241003' \/><input type='hidden' id='answerType241003' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241003[]' id='answer-id-955153' class='answer   answerof-241003 ' value='955153'   \/><label for='answer-id-955153' id='answer-label-955153' class=' answer'><span>A handshake took place, but no data packets were sent prior to the timeout.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241003[]' id='answer-id-955154' class='answer   answerof-241003 ' value='955154'   \/><label for='answer-id-955154' id='answer-label-955154' class=' answer'><span>A handshake took place; however, there were not enough packets to identify the application.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241003[]' id='answer-id-955155' class='answer   answerof-241003 ' value='955155'   \/><label for='answer-id-955155' id='answer-label-955155' class=' answer'><span>A handshake did take place, but the application could not be identified.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241003[]' id='answer-id-955156' class='answer   answerof-241003 ' value='955156'   \/><label for='answer-id-955156' id='answer-label-955156' class=' answer'><span>A handshake did not take place, and the application could not be identified.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-50' style=';'><div id='questionWrap-50'  class='   watupro-question-id-241004'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>50. <\/span>Using multiple templates in a stack to manage many firewalls provides which two advantages? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_50' value='241004' \/><input type='hidden' id='answerType241004' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-241004[]' id='answer-id-955157' class='answer   answerof-241004 ' value='955157'   \/><label for='answer-id-955157' id='answer-label-955157' class=' answer'><span>inherit address-objects from templates<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-241004[]' id='answer-id-955158' class='answer   answerof-241004 ' value='955158'   \/><label for='answer-id-955158' id='answer-label-955158' class=' answer'><span>define a common standard template configuration for firewalls<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-241004[]' id='answer-id-955159' class='answer   answerof-241004 ' value='955159'   \/><label for='answer-id-955159' id='answer-label-955159' class=' answer'><span>standardize server profiles and authentication configuration across all stacks<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-241004[]' id='answer-id-955160' class='answer   answerof-241004 ' value='955160'   \/><label for='answer-id-955160' id='answer-label-955160' class=' answer'><span>standardize log-forwarding profiles for security polices across all stacks<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-51' style=';'><div id='questionWrap-51'  class='   watupro-question-id-241005'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>51. <\/span>A network security engineer wants to prevent resource-consumption issues on the firewall. <br \/>\r<br>Which strategy is consistent with decryption best practices to ensure consistent performance?<\/div><input type='hidden' name='question_id[]' id='qID_51' value='241005' \/><input type='hidden' id='answerType241005' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241005[]' id='answer-id-955161' class='answer   answerof-241005 ' value='955161'   \/><label for='answer-id-955161' id='answer-label-955161' class=' answer'><span>Use RSA in a Decryption profile tor higher-priority and higher-risk traffic, and use less processor-intensive decryption methods for lower-risk traffic<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241005[]' id='answer-id-955162' class='answer   answerof-241005 ' value='955162'   \/><label for='answer-id-955162' id='answer-label-955162' class=' answer'><span>Use PFS in a Decryption profile for higher-priority and higher-risk traffic, and use less processor-intensive decryption methods for tower-risk traffic<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241005[]' id='answer-id-955163' class='answer   answerof-241005 ' value='955163'   \/><label for='answer-id-955163' id='answer-label-955163' class=' answer'><span>Use Decryption profiles to downgrade processor-intensive ciphers to ciphers that are less processor-intensive<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-241005[]' id='answer-id-955164' class='answer   answerof-241005 ' value='955164'   \/><label for='answer-id-955164' id='answer-label-955164' class=' answer'><span>Use Decryption profiles to drop traffic that uses processor-intensive ciphers<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div style='display:none' id='question-52'>\n\t<div class='question-content'>\n\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading...\" title=\"Loading...\" \/>&nbsp;Loading...\t<\/div>\n<\/div>\n\n<br \/>\n\t\n\t\t\t<div class=\"watupro_buttons flex \" id=\"watuPROButtons6750\" >\n\t\t  <div id=\"prev-question\" style=\"display:none;\"><input type=\"button\" value=\"&lt; Previous\" onclick=\"WatuPRO.nextQuestion(event, 'previous');\"\/><\/div>\t\t  \t\t  \t\t   \n\t\t   \t  \t\t<div><input type=\"button\" name=\"action\" class=\"watupro-submit-button\" onclick=\"WatuPRO.submitResult(event)\" id=\"action-button\" value=\"View Results\"  \/>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<input type=\"hidden\" name=\"quiz_id\" value=\"6750\" id=\"watuPROExamID\"\/>\n\t<input type=\"hidden\" name=\"start_time\" id=\"startTime\" value=\"2026-05-05 08:22:57\" \/>\n\t<input type=\"hidden\" name=\"start_timestamp\" id=\"startTimeStamp\" value=\"1777969377\" \/>\n\t<input type=\"hidden\" name=\"question_ids\" value=\"\" \/>\n\t<input type=\"hidden\" name=\"watupro_questions\" value=\"240955:954950,954951,954952,954953 | 240956:954954,954955,954956,954957 | 240957:954958,954959,954960,954961 | 240958:954962,954963,954964,954965 | 240959:954966,954967,954968,954969 | 240960:954970,954971,954972,954973 | 240961:954974,954975,954976,954977 | 240962:954978,954979,954980,954981 | 240963:954982,954983,954984,954985,954986 | 240964:954987,954988,954989,954990 | 240965:954991,954992,954993,954994 | 240966:954995,954996,954997,954998 | 240967:954999,955000,955001,955002 | 240968:955003,955004,955005,955006,955007,955008 | 240969:955009,955010,955011,955012 | 240970:955013,955014,955015,955016 | 240971:955017,955018,955019,955020 | 240972:955021,955022,955023,955024,955025,955026 | 240973:955027,955028,955029,955030,955031 | 240974:955032,955033,955034,955035 | 240975:955036,955037,955038,955039 | 240976:955040,955041,955042,955043 | 240977:955044,955045,955046,955047,955048 | 240978:955049,955050,955051,955052,955053 | 240979:955054,955055,955056,955057 | 240980:955058,955059,955060,955061 | 240981:955062,955063,955064,955065 | 240982:955066,955067,955068,955069,955070 | 240983:955071,955072,955073,955074 | 240984:955075,955076,955077,955078 | 240985:955079,955080,955081,955082 | 240986:955083,955084,955085,955086 | 240987:955087,955088,955089,955090 | 240988:955091,955092,955093,955094 | 240989:955095,955096,955097,955098,955099 | 240990:955100,955101,955102,955103 | 240991:955104,955105,955106,955107 | 240992:955108,955109,955110,955111 | 240993:955112,955113,955114,955115,955116 | 240994:955117,955118,955119,955120 | 240995:955121,955122,955123,955124 | 240996:955125,955126,955127,955128 | 240997:955129,955130,955131,955132 | 240998:955133,955134,955135,955136 | 240999:955137,955138,955139,955140 | 241000:955141,955142,955143,955144 | 241001:955145,955146,955147,955148 | 241002:955149,955150,955151,955152 | 241003:955153,955154,955155,955156 | 241004:955157,955158,955159,955160 | 241005:955161,955162,955163,955164\" \/>\n\t<input type=\"hidden\" name=\"no_ajax\" value=\"0\">\t\t\t<\/form>\n\t<p>&nbsp;<\/p>\n<\/div>\n\n<script type=\"text\/javascript\">\n\/\/jQuery(document).ready(function(){\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \t\nvar question_ids = \"240955,240956,240957,240958,240959,240960,240961,240962,240963,240964,240965,240966,240967,240968,240969,240970,240971,240972,240973,240974,240975,240976,240977,240978,240979,240980,240981,240982,240983,240984,240985,240986,240987,240988,240989,240990,240991,240992,240993,240994,240995,240996,240997,240998,240999,241000,241001,241002,241003,241004,241005\";\nWatuPROSettings[6750] = {};\nWatuPRO.qArr = question_ids.split(',');\nWatuPRO.exam_id = 6750;\t    \nWatuPRO.post_id = 47667;\nWatuPRO.store_progress = 0;\nWatuPRO.curCatPage = 1;\nWatuPRO.requiredIDs=\"0\".split(\",\");\nWatuPRO.hAppID = \"0.04149100 1777969377\";\nvar url = \"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/show_exam.php\";\nWatuPRO.examMode = 1;\nWatuPRO.siteURL=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-admin\/admin-ajax.php\";\nWatuPRO.emailIsNotRequired = 0;\nWatuPROIntel.init(6750);\nWatuPRO.inCategoryPages=1;});    \t \n<\/script>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[134,12967],"tags":[14726,7704,7705,14725],"class_list":["post-47667","post","type-post","status-publish","format-standard","hentry","category-palo-alto-networks","category-pcnse-certifications","tag-palo-alto-networks-certified-network-security-engineer","tag-pcnse","tag-pcnse-dumps","tag-pcnse-study-guide"],"_links":{"self":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/47667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/comments?post=47667"}],"version-history":[{"count":1,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/47667\/revisions"}],"predecessor-version":[{"id":47669,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/47667\/revisions\/47669"}],"wp:attachment":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/media?parent=47667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/categories?post=47667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/tags?post=47667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}