On March 10, 2016, between 11:00 am and 11:30 am, users reported that web-browsing traffic to the IP address 1.1.1.1 failed.
Which filter can be applied to the traffic logs to show how many users were affected during this time frame?

• A.( time_generated geq `2016/03/10 11:00:00') and ( time_generated leq `2016/03/10 11:30:00') and ( app neq web-browsing )
• B.( time_generated geq `2016/03/10 11:00:00') and ( time_generated leq `2016/03/10 11:30:00') and ( addr.dst in 1.1.1.1)
• C.( time_generated leq `2016/03/10 11:30:00') and ( app is web-browsing )
• D.( time_generated leq `2016/03/10 11:00:00') and ( time_generated geq `2016/03/10 11:30:00') and ( app eq web-browsing )

Comment: *

Name: *

Email: *

Verification: *

What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

• A.Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.
• B.An administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 8.1 state.
• C.When Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.
• D.Administrators need to manually update variable characters to those used in pre-PAN-OS 8.1.

Comment: *

Name: *

Email: *

Verification: *

A traffic log might list an application as "not-applicable" for which two reasons'? (Choose two )

• A.The firewall dropped a TCP SYN packet
• B.The firewall did not install the session
• C.The TCP connection terminated without identifying any application data
• D.There was not enough application data after the TCP connection was established

Comment: *

Name: *

Email: *

Verification: *

An administrator is troubleshooting why video traffic is not being properly classified.
If this traffic does not match any QoS classes, what default class is assigned?

• A.1
• B.2
• C.3
• D.4

Comment: *

Name: *

Email: *

Verification: *

After pushing a security policy from Panorama to a PA-3020 firewall, the firewall administrator notices that traffic logs from the PA-3020 are not appearing in Panorama's traffic logs. What could be the problem?

• A.A Server Profile has not been configured for logging to this Panorama device.
• B.Panorama is not licensed to receive logs from this particular firewall.
• C.The firewall is not licensed for logging to this Panorama device.
• D.None of the firewall's policies have been assigned a Log Forwarding profile

Correct Answer: D

In order to see entries in the Panorama Monitor > Traffic or Monitor > Log screens, a profile must be created on the Palo Alto Networks device (or pushed from Panorama) to forward log traffic to Panorama.
Steps:
1. Go to Policies > Security and open the Options for a rule.
2. Under Log Setting, select New for Log Forwarding to create a new forwarding profile:

Etc.
https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Create-a-Profile-to-Forward- Logs-to-Panorama/ta-p/54038

Comment: *

Name: *

Email: *

Verification: *