Refer to Exhibit:


A firewall has three PDF rules and a default route with a next hop of 172.29.19.1 that is configured in the default VR. A user named XX-bes a PC with a 192.168.101.10 IP address.
He makes an HTTPS connection to 172.16.10.29.
What is the next hop IP address for the HTTPS traffic from Wills PC.

• A.172.20.20.1
• B.172.20.40.1
• C.172.20.30.1
• D.172.20.10.1

Comment: *

Name: *

Email: *

Verification: *

What is exchanged through the HA2 link?

• A.hello heartbeats
• B.User-ID information
• C.session synchronization
• D.HA state information

Comment: *

Name: *

Email: *

Verification: *

The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice As part of that effort, the manager has assigned you the Vulnerability Protection profile for the internet gateway firewall Which action and packet-capture setting for items of high severity and critical severity best matches Palo Alto Networks best practice'?

• A.action 'reset-both' and packet capture 'single-packet'
• B.action 'reset-both' and packet capture 'extended-capture'
• C.action 'default' and packet capture 'single-packet'
• D.action 'reset-server' and packet capture 'disable'

Comment: *

Name: *

Email: *

Verification: *

A user at an external system with the IP address 65.124.57.5 queries the DNS server at 4. 2.2.2 for the IP address of the web server, www,xyz.com. The DNS server returns an address of 172.16.15.1 In order to reach Ire web server, which Security rule and NAT rule must be configured on the firewall?

A)

B)

C)

D)

• A.Option D
• B.Option C
• C.Option A
• D.Option B

Comment: *

Name: *

Email: *

Verification: *

Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?

• A.Add a WildFire subscription to activate DoS and zone protection features
• B.Measure and monitor the CPU consumption of the firewall data plane to ensure that each firewall is properly sized to support DoS and zone protection
• C.Create a zone protection profile with flood protection configured to defend an entire egress zone against SYN. ICMP ICMPv6, UDP. and other IP flood attacks
• D.Replace the hardware firewall because DoS and zone protection are not available with VM-Series systems

Comment: *

Name: *

Email: *

Verification: *