in URL filtering, which component matches URL patterns?

• A.live URL feeds on the management plane
• B.security processing on the data plane
• C.signature matching on the data plane
• D.single-pass pattern matching on the data plane

Comment: *

Name: *

Email: *

Verification: *

What are three prerequisites for credential phishing prevention to function? (Choose three.)

• A.In the URL filtering profile, use the drop-down list to enable user credential detection.
• B.Enable Device-ID in the zone.
• C.Select the action for Site Access for each category.
• D.Set phishing category to block in the URL Filtering profile.
• E.Add the URL filtering profile to one or more Security policy rules.

Comment: *

Name: *

Email: *

Verification: *

An engineer needs to permit XML API access to a firewall for automation on a network segment that is routed through a Layer 3 subinterface on a Palo Alto Networks firewall. However this network segment cannot access the dedicated management interface due to the Security policy Without changing the existing access to the management interface how can the engineer fulfill this request?

• A.Specify the subinterface as a management interface in Setup > Device > Interfaces
• B.Add the network segment's IP range to the Permitted IP Addresses list
• C.Enable HTTPS in an Interface Management profile on the subinterface
• D.Configure a service route for HTTP to use the subinterface

Comment: *

Name: *

Email: *

Verification: *

What are three reasons why an installed session can be identified with the application

• A.The client sent a TCP segment with the PUSH flag set
• B.There is not enough application data after the TCP connection was established
• C.There was no application data after the TCP connection was established
• D.The TCP connection was terminated without identifying any application data
• E.The TCP connection did not fully establish

Comment: *

Name: *

Email: *

Verification: *

An administrator is attempting to create policies tor deployment of a device group and template stack. When creating the policies, the zone drop down list does not include the required zone.
What must the administrator do to correct this issue?

• A.Specify the target device as the master device in the device group
• B.Enable "Share Unused Address and Service Objects with Devices" in Panorama settings
• C.Add the template as a reference template in the device group
• D.Add a firewall to both the device group and the template

Comment: *

Name: *

Email: *

Verification: *