An engineer needs to configure SSL Forward Proxy to decrypt traffic on a PA-5260. The engineer uses a forward trust certificate from the enterprise PKI that expires December 31, 2025. The validity date on the PA-generated certificate is taken from what?

• A.The trusted certificate
• B.The server certificate
• C.The untrusted certificate
• D.The root CA

Comment: *

Name: *

Email: *

Verification: *

Which two virtualization platforms officially support the deployment of Palo Alto Networks VM-Series firewalls? (Choose two.)

• A.Red Hat Enterprise Virtualization (RHEV)
• B.Kernel Virtualization Module (KVM)
• C.Boot Strap Virtualization Module (BSVM)
• D.Microsoft Hyper-V

Comment: *

Name: *

Email: *

Verification: *

Which three fields can be included in a pcap filter? (Choose three)

• A.Egress interface
• B.Source IP
• C.Rule number
• D.Destination IP
• E.Ingress interface

Correct Answer: B,D,E

https://knowledgebase.paloaltonetworks.com/servlet/rtaImage?eid=ka10g000000U0KT&feoid=00 N0g000003VPSv&refid=0EM0g000001Ja97

Comment: *

Name: *

Email: *

Verification: *

Which two mechanisms help prevent a spilt brain scenario an Active/Passive High Availability (HA) pair?
(Choose two)

• A.Configure ethernet1/1 as HA3 Backup
• B.Configure the management interface as HA1 Backup
• C.Configure the management interface as HA3 Backup
• D.Configure Ethernet 1/1 as HA1 Backup
• E.Configure the management interface as HA2 Backup
• F.Configure Ethernet 1/1 as HA2 Backup

Comment: *

Name: *

Email: *

Verification: *

Which profile generates a packet threat type found in threat logs?

• A.Zone Protection
• B.WildFire
• C.Anti-Spyware
• D.Antivirus

Comment: *

Name: *

Email: *

Verification: *