Which option would an administrator choose to define the certificate and protocol that Panorama and its
managed devices use for SSL/TLS services?

• A.Configure a Decryption Profile and select SSL/TLS services.
• B.Set up SSL/TLS under Polices > Service/URL Category>Service.
• C.Set up Security policy rule to allow SSL communication.
• D.Configure an SSL/TLS Profile.

Comment: *

Name: *

Email: *

Verification: *

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)

• A.Verify AutoFocus status using CLI "test" command.
• B.Check the WebUI Dashboard AutoFocus widget.
• C.Check for WildFire forwarding logs.
• D.Check the license
• E.Verify AutoFocus is enabled below Device Management tab.

Comment: *

Name: *

Email: *

Verification: *

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

• A.Deny application facebook-chat before allowing application facebook
• B.Deny application facebook on top
• C.Allow application facebook on top
• D.Allow application facebook before denying application facebook-chat

Comment: *

Name: *

Email: *

Verification: *

Which of the following are critical features of a Next Generation Firewall that provide Breach prevention? Choose two.

• A.Application Visibility and URL Categorization
• B.Alarm generation of known threats traversing the device
• C.Processing all traffic across all ports & protocols, in both directions
• D.Centralized or distributed log collectors
• E.Endpoint and server scanning for known malware

Comment: *

Name: *

Email: *

Verification: *

Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OS® software?

• A.XML API
• B.Port Mapping
• C.Client Probing
• D.Server Monitoring

Comment: *

Name: *

Email: *

Verification: *