What two authentication methods on the Palo Alto Networks firewalls support authentication and authorization for role-based access control? (Choose two.)

• A.Kerberos
• B.LDAP
• C.TACACS+
• D.SAML

Comment: *

Name: *

Email: *

Verification: *

Actions can be set for which two items in a URL filtering security profile? (Choose two.)

• A.Block List
• B.PAN-DB URL Categories
• C.Allow List
  https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/url-filtering/url-filtering-concepts/url-filtering-profile-actions
• D.Custom URL Categories

Comment: *

Name: *

Email: *

Verification: *

Match the cyber-attack lifecycle stage to its correct description.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone. What configuration-changes should the Firewall-admin make?

• A.Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a security-rule between zone USERS and OUTSIDE to allow traffic from any source IP-address to any destination IP- address for SERVICE-SSH
• B.Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP- address to any destination IP-address for application SSH
• C.In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains source-port- TCP-22 should be created. A second security-rule is required that allows traffic from zone OUTSIDE to USERS for SERVICE-SSH-RETURN for any source-IP-address to any destination-Ip-address
• D.In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin

Comment: *

Name: *

Email: *

Verification: *

At which point in the app-ID update process can you determine if an existing policy rule is affected by an app-ID update?

• A.after connecting the firewall configuration
• B.after installing the update
• C.after clicking Check New in the Dynamic Update window
• D.after downloading the update

Comment: *

Name: *

Email: *

Verification: *