Which two settings can be configured only locally on the firewall and not pushed from a Panorama template or template stack? (Choose two)

• A.HA1 IP Address
• B.Network Interface Type
• C.Master Key
• D.Zone Protection Profile

Comment: *

Name: *

Email: *

Verification: *

A client is deploying a pair of PA-5000 series firewalls using High Availability (HA) in Active/Passive mode. Which statement is true about this deployment?

• A.The two devices must share a routable floating IP address
• B.The two devices may be different models within the PA-5000 series
• C.The HA1 IP address from each peer must be on a different subnet
• D.The management port may be used for a backup control connection

Comment: *

Name: *

Email: *

Verification: *

An engineer must configure a new SSL decryption deployment.
Which profile or certificate is required before any traffic that matches an SSL decryption rule is decrypted?

• A.There must be a certificate with both the Forward Trust option and Forward Untrust option selected.
• B.A Decryption profile must be attached to the Security policy that the traffic matches.
• C.A Decryption profile must be attached to the Decryption policy that the traffic matches.
• D.There must be a certificate with only the Forward Trust option selected.

Comment: *

Name: *

Email: *

Verification: *

Which setting allow a DOS protection profile to limit the maximum concurrent sessions from a source IP address?

• A.Set the type to Classified, check the Sessions box and set the Maximum concurrent Sessions to
  4000.
• B.Set the type to Classified, clear the sessions box and set the Maximum concurrent Sessions to
  4000.
• C.Set the type to Aggregate, clear the sessions box and set the Maximum concurrent Sessions to
  4000.
• D.Set the type to Aggregate, check the Sessions box and set the Maximum concurrent Sessions to
  4000.

Comment: *

Name: *

Email: *

Verification: *

A user at an internal system queries the DNS server for their web server with a private IP of 10 250 241 131 in the. The DNS server returns an address of the web server's public address, 200.1.1.10.
In order to reach the web server, which security rule and U-Turn NAT rule must be configured on the firewall?

A)

B)

C)

D)

• A.Option C
• B.Option A
• C.Option B
• D.Option D

Comment: *

Name: *

Email: *

Verification: *