IT Certification Exam Questions & Answers

NEW QUESTION 50
An administrator needs to troubleshoot a User-ID deployment The administrator believes that there is an issue related to LDAP authentication The administrator wants to create a packet capture on the management plane Which CLI command should the administrator use to obtain the packet capture for validating the configuration^

NEW QUESTION 51
The same route appears in the routing table three times using three different protocols Which mechanism determines how the firewall chooses which route to use?

NEW QUESTION 52
A customer wants to set up a site-to-site VPN using tunnel interfaces?
Which two formats are correct for naming tunnel interfaces? (Choose two.)

NEW QUESTION 53
What are two common reasons to use a “No Decrypt” action to exclude traffic from SSL decryption? (Choose two.)

NEW QUESTION 54
An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an internal syslog server.
Where can the firewall engineer define the data to be added into each forwarded log?

NEW QUESTION 55
When setting up a security profile which three items can you use? (Choose three )

NEW QUESTION 56
Refer to the exhibit.

Which certificates can be used as a Forwarded Trust certificate?

NEW QUESTION 57
An administrator wants to enable WildFire inline machine learning.
Which three file types does WildFire inline ML analyze? (Choose three.)

NEW QUESTION 58


Review the images. A firewall policy that permits web traffic includes the global-logs policy is depicted What is the result of traffic that matches the “Alert – Threats” Profile Match List?

NEW QUESTION 59
Which time determines how long the passive firewall will wait before taking over as the active firewall alter losing communications with the HA peer?

NEW QUESTION 60
Which four NGFW multi-factor authentication factors are supported by PAN-OS? (Choose four.)

NEW QUESTION 61
An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans. Which Security Profile type will protect against worms and trojans?

NEW QUESTION 62
Which command can be used to validate a Captive Portal policy?

NEW QUESTION 63
An administrator has been asked to create 100 virtual firewalls in a local, on-premise lab environment (not
in “the cloud”). Bootstrapping is the most expedient way to perform this task.
Which option describes deployment of a bootstrap package in an on-premise virtual environment?

NEW QUESTION 64
Which device Group option is assigned by default in Panorama whenever a new device group is created to manage a Firewall?

NEW QUESTION 65
A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration.
Once deployed each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN preconfigured configuration would adapt to changes when deployed to the future site?

NEW QUESTION 66
An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an internal syslog server.
Where can the firewall engineer define the data to be added into each forwarded log?

NEW QUESTION 67
Refer to the exhibit.

An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) received HTTP traffic and host B(10.1.1.101) receives SSH traffic.
Which two security policy rules will accomplish this configuration? (Choose two)

NEW QUESTION 68
Refer to the exhibit.

Which will be the egress interface if the traffic’s ingress interface is ethernet1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

NEW QUESTION 69
A root cause analysis investigation into a recent security incident reveals that several decryption rules have been disabled. The security team wants to generate email alerts when decryption rules are changed.
How should email log forwarding be configured to achieve this goal?

NEW QUESTION 70
A firewall engineer creates a NAT rule to translate IP address 1.1.1.10 to 192.168.1.10. The engineer also plans to enable DNS rewrite so that the firewall rewrites the IPv4 address in a DNS response based on the original destination IP address and translated destination IP address configured for the rule. The engineer wants the firewall to rewrite a DNS response of 1.1.1.10 to 192.168.1.10.
What should the engineer do to complete the configuration?

NEW QUESTION 71
After switching to a different WAN connection, users have reported that various websites will not load, and timeouts are occurring. The web servers work fine from other locations.
The firewall engineer discovers that some return traffic from these web servers is not reaching the users behind the firewall. The engineer later concludes that the maximum transmission unit (MTU) on an upstream router interface is set to 1400 bytes.
The engineer reviews the following CLI output for ethernet1/1.

Which setting should be modified on ethernet1/1 to remedy this problem?

NEW QUESTION 72
Refer to the exhibit.

Based on the screenshots above what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?