Which two statements are correct about App-ID content updates? (Choose two.)

• A.Existing security policy rules are not affected by application content updates.
• B.Updated application content might change how Security policy rules are enforced.
• C.After an application content update, new applications are automatically identified and classified.
• D.After an application content update, new applications must be manually classified prior to use.

Comment: *

Name: *

Email: *

Verification: *

Which Palo Alto Networks service protects cloud-based applications such as Dropbox and Salesforce by monitoring permissions and shares and scanning files for sensitive information?

• A.Prisma SaaS
• B.AutoFocus
• C.Panorama
• D.GlobalProtect

Comment: *

Name: *

Email: *

Verification: *

Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

Correct Answer:

Explanation
Step 1 - Select network tab
Step 2 - Select zones from the list of available items
Step 3 - Select Add
Step 4 - Specify Zone Name
Step 5 - Specify Zone Type
Step 6 - Assign interfaces as needed

Comment: *

Name: *

Email: *

Verification: *

Which path in PAN-OS 10.0 displays the list of port-based security policy rules?

• A.Policies> Security> Rule Usage> Port-based Rules
• B.Policies> Security> Rule Usage> No App Specified
• C.Policies> Security> Rule Usage> Unused Apps
• D.Policies> Security> Rule Usage> Port only specified

Comment: *

Name: *

Email: *

Verification: *

Which statement is true about Panorama managed devices?

• A.Security policy rules configured on local firewalls always take precedence
• B.Panorama automatically removes local configuration locks after a commit from Panorama
• C.Local configuration locks can be manually unlocked from Panorama
• D.Local configuration locks prohibit Security policy changes for a Panorama managed device

Comment: *

Name: *

Email: *

Verification: *