A firewall enabled as a decryption broker will take which of the following actions?

• A.correlate a series of related threat events that indicate a likely compromised host on the network
• B.forward clear text traffic to security chains for additional enforcement
• C.monitor the state of active connections to determine which network packets to allow through
• D.identify potential denial-of-service (DoS) attacks and take protective action

Comment: *

Name: *

Email: *

Verification: *

The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and received from this website.
Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?

• A.Forward Proxy
• B.Certificate Proxy
• C.Web Proxy
• D.Inbound Proxy

Comment: *

Name: *

Email: *

Verification: *

Which two of the following are benefits of the Palo Alto Networks Zero Trust architecture? (Choose two.) Select 2 Correct Responses

• A.cloud-based virtual private network (VPN)
• B.more network segments
• C.tighter access control
• D.increased detection of threats and infiltration

Comment: *

Name: *

Email: *

Verification: *

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

• A.SLR interface
• B.virtual wire interface
• C.Layer 3 interface
• D.TAP interface

Comment: *

Name: *

Email: *

Verification: *

Which Next-Generation Firewall (NGFW) deployment model allows an organization to monitor traffic during evaluations without interruption to network traffic?

• A.TAP mode
• B.Layer 3
• C.Layer 2
• D.virtual wire

Comment: *

Name: *

Email: *

Verification: *