Given the image, which two options are true about the Security policy rules. (Choose two.)

• A.In the Allow Social Networking rule, allows all of Facebook's functions
• B.The Allow Office Programs rule is using an Application Filter
• C.The Allow Office Programs rule is using an Application Group
• D.In the Allow FTP to web server rule, FTP is allowed using App-ID

Comment: *

Name: *

Email: *

Verification: *

Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

Complete the statement. A security profile can block or allow traffic____________

• A.on unknown-tcp or unknown-udp traffic
• B.after it is matched by a security policy that allows traffic
• C.before it is matched by a security policy
• D.after it is matched by a security policy that allows or blocks traffic

Comment: *

Name: *

Email: *

Verification: *

What do Dynamic User Groups help you to do?

• A.create a policy that provides auto-remediation for anomalous user behavior and malicious activity
• B.create a dynamic list of firewall administrators
• C.create a QoS policy that provides auto-remediation for anomalous user behavior and malicious activity
• D.create a policy that provides auto-sizing for anomalous user behavior and malicious activity

Comment: *

Name: *

Email: *

Verification: *

Given the topology, which zone type should interface E1/1 be configured with?

• A.Tap
• B.Tunnel
• C.Virtual Wire
• D.Layer3

Comment: *

Name: *

Email: *

Verification: *