Match each SD-WAN configuration element to the description of that element.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewall use Layer 3 interfaces to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?

• A.The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.
• B.Each firewall will have a separate floating IP, and priority will determine which firewall has the primary IP.
• C.The firewalls do not use floating IPs in active/active HA.
• D.The firewalls will share the same interface IP address, and device 1 will use the floating IP if device 0 fails.

Comment: *

Name: *

Email: *

Verification: *

On March 10, 2016, between 11:00 am and 11:30 am, users reported that web-browsing traffic to the IP address 1.1.1.1 failed.
Which filter can be applied to the traffic logs to show how many users were affected during this time frame?

• A.( time_generated geq `2016/03/10 11:00:00') and ( time_generated leq `2016/03/10 11:30:00') and ( app neq web-browsing )
• B.( time_generated leq `2016/03/10 11:00:00') and ( time_generated geq `2016/03/10 11:30:00') and ( app eq web-browsing )
• C.( time_generated leq `2016/03/10 11:30:00') and ( app is web-browsing )
• D.( time_generated geq `2016/03/10 11:00:00') and ( time_generated leq `2016/03/10 11:30:00') and ( addr.dst in 1.1.1.1)

Comment: *

Name: *

Email: *

Verification: *

An engineer must configure the Decryption Broker feature
Which Decryption Broker security chain supports bi-directional traffic flow?

• A.Layer 2 security chain
• B.Layer 3 security chain
• C.Transparent Bridge security chain
• D.Transparent Proxy security chain

Comment: *

Name: *

Email: *

Verification: *

An administrator has 750 firewalls The administrator's central-management Panorama instance deploys dynamic updates to the firewalls The administrator notices that the dynamic updates from Panorama do not appear on some of the firewalls If Panorama pushes the configuration of a dynamic update schedule to managed firewalls, but the configuration does not appear what is the root cause?

• A.Locally-defined dynamic update settings take precedence over the settings that Panorama pushed
• B.Panorama has no connection to Palo Alto Networks update servers
• C.Panorama does not have valid licenses to push the dynamic updates
• D.No service route is configured on the firewalls to Palo Alto Networks update servers

Comment: *

Name: *

Email: *

Verification: *