Given the image, which two options are true about the Security policy rules. (Choose two.)

• A.In the Allow Social Networking rule, allows all of Facebook's functions
• B.In the Allow FTP to web server rule, FTP is allowed using App-ID
• C.The Allow Office Programs rule is using an Application Filter
• D.The Allow Office Programs rule is using an Application Group

Comment: *

Name: *

Email: *

Verification: *

Identify the correct order to configure the PAN-OS integrated USER-ID agent.
3. add the service account to monitor the server(s)
2. define the address of the servers to be monitored on the firewall
4. commit the configuration, and verify agent connection status
1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

• A.3-1-2-4
• B.1-3-2-4
• C.2-3-4-1
• D.1-4-3-2

Comment: *

Name: *

Email: *

Verification: *

Complete the statement. A security profile can block or allow traffic.

• A.before it is evaluated by a security policy
• B.on unknown-tcp or unknown-udp traffic
• C.after it is evaluated by a security policy that allows or blocks traffic
• D.after it is evaluated by a security policy that allows traffic

Comment: *

Name: *

Email: *

Verification: *

What are three valid ways to map an IP address to a username? (Choose three.)

• A.usernames inserted inside HTTP Headers
• B.using the XML API
• C.DHCP Relay logs
• D.a user connecting into a GlobalProtect gateway using a GlobalProtect Agent
• E.WildFire verdict reports

Comment: *

Name: *

Email: *

Verification: *

Which path in PAN-OS 9.0 displays the list of port-based security policy rules?

• A.Policies> Security> Rule Usage> No App Specified
• B.Policies> Security> Rule Usage> Port only specified
• C.Policies> Security> Rule Usage> Port-based Rules
• D.Policies> Security> Rule Usage> Unused Apps

Comment: *

Name: *

Email: *

Verification: *