Which three authentication factors does PAN-OS® software support for MFA (Choose three.)

• A.Okta Adaptive
• B.Voice
• C.SMS
• D.Pull
• E.Push

Comment: *

Name: *

Email: *

Verification: *

A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443 A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server hosts its contents over HTTP(S). Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules, needs to be configured to allow cJeartext web-browsing traffic to this server on tcp/443?

• A.Rule #1 application: web-browsing; service application-default; action: allow Rule #2- application: ssl; service: application-default; action: allow
• B.Rule #1: application: web-browsing; service: service-http; action: allow Rule #2: application: ssl; service: application-default; action: allow
• C.Rule #1: application; web-browsing; service: service-https; action: allow Rule #2 application: ssl; service: application-default, action: allow
• D.Rule tf1 application: ssl; service: application-default; action: allow Rule #2 application; web-browsing; service application-default; action: allow

Comment: *

Name: *

Email: *

Verification: *

A company wants to install a PA-3060 firewall between two core switches on a VLAN trunk link. They need to assign each VLAN to its own zone and to assign untagged (native) traffic to its own zone which options differentiates multiple VLAN into separate zones?

• A.Create V-Wire objects with two V-Wire interfaces and define a range "0- 4096" in the 'Tag Allowed filed of the V-Wire object.
• B.Create V-Wire objects with two V-Wire sub interface and assign only a single VLAN ID to the "Tag Allowed field one of the V-Wire object Repeat for every additional VLAN and use a VIAN ID of 0 for untagged traffic. Assign each interface/subinterfaceto a unique zone.
• C.Create VLAN objects for each VLAN and assign VLAN interfaces matching each VLAN ID. Repeat for every additional VLANand use a VLAN ID of 0 for untagged traffic. Assign each interface/subinterface to a unique zone.
• D.Create Layer 3 sub interfaces that are each assigned to a single VLAN ID and a common virtual router. The physical Layer 3interface would handle untagged traffic. Assign each interface
  /subinterface to a unique zone. Do not assign any interface anIP address

Comment: *

Name: *

Email: *

Verification: *

Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?

• A.Deny application facebook-chat before allowing application facebook
• B.Deny application facebook on top
• C.Allow application facebook on top
• D.Allow application facebook before denying application facebook-chat

Comment: *

Name: *

Email: *

Verification: *

How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?

• A.Configure the option for "Threshold".
• B.Disable automatic updates during weekdays.
• C.Automatically "download only" and then install Applications and Threats later, after the administrator approves the update.
• D.Automatically "download and install" but with the "disable new applications" option used.

Comment: *

Name: *

Email: *

Verification: *