Given the network diagram, traffic should be permitted for both Trusted and Guest users to access general Internet and DMZ servers using SSH. web-browsing and SSL applications Which policy achieves the desired results?
A)

B)

C)

D)

• A.Option
• B.Option
• C.Option
• D.Option

Comment: *

Name: *

Email: *

Verification: *

You have been tasked to configure access to a new web server located in the DMZ Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?

• A.Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 172.16.1.2
• B.Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168.1.254
• C.Add a route with the destination of 192 168 1 0/24 using interface Eth 1/2 with a next-hop of 172.16.1.2
• D.Add a route with the destination of 192 168 1 0/24 using interface Eth 1/3 with a next-hop of 192.168 1.10

Comment: *

Name: *

Email: *

Verification: *

During the App-ID update process, what should you click on to confirm whether an existing policy rule is affected by an App-ID update?

• A.check now
• B.test policy match
• C.download
• D.review policies

Comment: *

Name: *

Email: *

Verification: *

Which two configuration settings shown are not the default? (Choose two.)

• A.Enable Security Log
• B.Server Log Monitor Frequency (sec)
• C.Enable Session
• D.Enable Probing

Comment: *

Name: *

Email: *

Verification: *

Match the Palo Alto Networks Security Operating Platform architecture to its description.

Correct Answer:

Explanation
Threat Intelligence Cloud - Gathers, analyzes, correlates, and disseminates threats to and from the network and endpoints located within the network.
Next-Generation Firewall - Identifies and inspects all traffic to block known threats Advanced Endpoint Protection - Inspects processes and files to prevent known and unknown exploits

Comment: *

Name: *

Email: *

Verification: *