At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

• A.exploitation
• B.IP command and control
• C.delivery
• D.reconnaissance

Comment: *

Name: *

Email: *

Verification: *

Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

• A.Both SSH keys and SSL certificates must be generated.
• B.No prerequisites are required.
• C.SSH keys must be manually generated.
• D.SSL certificates must be generated.

Correct Answer: D

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/decryption/configure-ssl-forward- proxy.html#idb39a2a9b-9c02-413b-ab1c-dc687b7bcb21

Comment: *

Name: *

Email: *

Verification: *

A firewall is configured with SSL Forward Proxy decryption and has the following four enterprise certificate authorities (Cas) i. Enterprise-Trusted-CA; which is verified as Forward Trust Certificate (The CA is also installed in the trusted store of the end-user browser and system ) ii. Enterpnse-Untrusted-CA, which is verified as Forward Untrust Certificate iii. Enterprise-lntermediate-CA iv. Enterprise-Root-CA which is verified only as Trusted Root CA An end-user visits https //www example-website com/ with a server certificate Common Name (CN) www example-website com The firewall does the SSL Forward Proxy decryption for the website and the server certificate is not trusted by the firewall The end-user's browser will show that the certificate for www.example-website.com was issued by which of the following?

• A.Enterprise-Root-CA which is a self-signed CA
• B.Enterprise-lntermediate-CA which was. in turn, issued by Enterprise-Root-CA
• C.Enterprise-Trusted-CA which is a self-signed CA
• D.Enterprise-Untrusted-CA which is a self-signed CA

Comment: *

Name: *

Email: *

Verification: *

Which log file can be used to identify SSL decryption failures?

• A.Configuration
• B.Threats
• C.ACC
• D.Traffic

Comment: *

Name: *

Email: *

Verification: *

A customer has an application that is being identified as unknown-top for one of their custom PostgreSQL database connections. Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)

• A.Application Override policy.
• B.Security policy to identify the custom application.
• C.Custom application.
• D.Custom Service object.

Comment: *

Name: *

Email: *

Verification: *