Based on the show security policy rule would match all FTP traffic from the inside zone to the outside zone?

• A.intercone-default
• B.engress outside
• C.internal-inside-dmz
• D.inside-portal

Comment: *

Name: *

Email: *

Verification: *

Arrange the correct order that the URL classifications are processed within the system.

Correct Answer:

Explanation
First - Block List
Second - Allow List
Third - Custom URL Categories
Fourth - External Dynamic Lists
Fifth - Downloaded PAN-DB Files
Sixth - PAN-DB Cloud

Comment: *

Name: *

Email: *

Verification: *

Complete the statement. A security profile can block or allow traffic____________

• A.after it is matched by a security policy that allows traffic
• B.before it is matched by a security policy
• C.after it is matched by a security policy that allows or blocks traffic Security profiles are objects added to policy rules that are configured with an action of allow.
• D.on unknown-tcp or unknown-udp traffic

Comment: *

Name: *

Email: *

Verification: *

Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

• A.on the Objects > Applications browser pages
• B.on the Policy Optimizer's Rule Usage page
  C on the Application tab in the Security Policy Rule creation window
• C.on the App Dependency tab in the Commit Status window

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?

• A.Untrust (any) to DMZ (10.1.1.100), web browsing -Allow
• B.Untrust (any) to Untrust (10.1.1.100), web browsing -Allow
• C.Untrust (any) to DMZ (1.1.1.100), web browsing - Allow
• D.Untrust (any) to Untrust (1.1.1.100), web browsing - Allow

Comment: *

Name: *

Email: *

Verification: *