When HTTPS for management and GlobalProtect are enabled on the same interface, which TCP port is used for management access?

• A.443
• B.80
• C.4443
• D.8443

Comment: *

Name: *

Email: *

Verification: *

Which statement is true regarding a Heatmap report?

• A.When guided by authorized sales engineer, it helps determine the areas of greatest security risk
• B.It runs only on firewalls.
• C.It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.
• D.It provides a percentage of adoption for each assessment area.

Comment: *

Name: *

Email: *

Verification: *

Which statement is true regarding a Best Practice Assessment?

• A.It runs only on firewalls.
• B.It shows how current configuration compares to Palo Alto Networks recommendations.
• C.When guided by an authorized sales engineer, it helps determine the areas of greatest risk where you should focus prevention activities.
• D.It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture.

Comment: *

Name: *

Email: *

Verification: *

An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

• A.east-west traffic
• B.perimeter traffic
• C.branch office traffic
• D.north-south traffic

Comment: *

Name: *

Email: *

Verification: *

A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

• A.Citrix terminal server with adequate data-plane resources
• B.Windows-based agent on a domain controller
• C.Captive Portal
• D.PAN-OS integrated agent

Comment: *

Name: *

Email: *

Verification: *