Question 1

In Panorama, which three reports or logs will help identify the inclusion of a host source in a command-and-control (C2) incident? (Choose three.)

Options :

A : SaaS reports

B : data filtering logs

C : WildFire analysis reports

D : threat logs

E : botnet reports

Answer: A,C,D

Question 2

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

Options :

A : It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support.

B : It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary

C : It can automatically create address groups for use with KVM.

D : It can bootstrap the virtual firewalls for dynamic deployment scenarios.

Answer: A,D

Question 3

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer's requirements? (Choose two.)

Options :

A : Virtual systems

B : HA active/active

C : HA active/passive

D : Policy-based forwarding

Answer: B,D

Question 4

in which step of the Palo Alto Networks Five-Step Zero Trust Methodology would an organization's critical data, applications, assets, and services (DAAS) be identified?

Options :

A : Step 4. Create the Zero Trust policy.

B : Step 2: Map the transaction flows.

C : Step 3. Architect a Zero Trust network.

D : Step 1: Define the protect surface

Answer: D

Question 5

Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Options :

A : Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once

B : Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement

C : Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement

D : Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Answer: A,D

Confidently Practice Online with Free PSE-Strata Exam Cram

Buying Options: