Which PAN-OS policy must you configure to force a user to provide additional credentials before he is allowed to access an internal application that contains highly-sensitive business data?

• A.Authentication policy
• B.Security policy
• C.Application Override policy
• D.Decryption policy

Comment: *

Name: *

Email: *

Verification: *

The certificate information displayed in the following image is for which type of certificate?

• A.Forward Trust certificate
• B.Web Server certificate
• C.Self-Signed Root CA certificate
• D.Public CA signed certificate

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An organization has Palo Alto Networks NGFWs that send logs to remote monitoring and security management platforms. The network team has reported excessive traffic on the corporate WAN.
How could the Palo Alto Networks NGFW administrator reduce WAN traffic while maintaining support for all the existing monitoring/security platforms?

• A.Forward logs from firewalls only to Panorama and have Panorama forward logs to other external services.
• B.Any configuration on an M-500 would address the insufficient bandwidth concerns.
• C.Configure log compression and optimization features on all remote firewalls.
• D.Forward logs from external sources to Panorama for correlation, and from Panorama send them to the NGFW.

Comment: *

Name: *

Email: *

Verification: *

An Administrator is configuring an IPSec VPN toa Cisco ASA at the administrator's home and experiencing issues completing the connection. The following is th output from the command:

What could be the cause of this problem?

• A.The public IP addresses do not match for both the Palo Alto Networks Firewall and the ASA.
• B.The Proxy IDs on the Palo Alto Networks Firewall do not match the settings on the ASA.
• C.The shared secrets do not match between the Palo Alto firewall and the ASA
• D.The deed peer detection settings do not match between the Palo Alto Networks Firewall and the ASA

Comment: *

Name: *

Email: *

Verification: *

Which GlobalProtect gateway setting is required to enable split-tunneling by access route, destination domain, and application?

• A.No Direct Access to local networks
• B.Satellite mode
• C.Tunnel mode
• D.IPSec mode

Comment: *

Name: *

Email: *

Verification: *