Which of the following statements applies to enabling App-ID on a Next-Generation Firewall (NGFW)?

• A.An App-ID subscription must be purchased and enabled.
• B.No additional purchase is required, but App-ID must be enabled for the customer to use it.
• C.No configuration is required, because App-ID is always enabled by default.
• D.A Threat Protection license must be purchased and enabled.

Comment: *

Name: *

Email: *

Verification: *

A customer has enabled the Threat Prevention subscription on their Palo Alto Networks Next-Generation Firewall.
How will the performance of the firewall be affected if the customer also enables both WildFire and User-ID?

• A.The maximum throughput performance will be reduced, but the impact will vary based on the firewall model being used.
• B.Enabling WildFire will have no additional performance impact, but enabling User-ID will reduce throughput.
• C.There will be no additional performance impact to the firewall, and throughput will remain the same, regardless of firewall model.
• D.Enabling User-ID will have no additional performance impact, but enabling WildFire will reduce throughput.

Comment: *

Name: *

Email: *

Verification: *

The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?

• A.security profile groups
• B.security zones
• C.LLDP profiles
• D.DHCP groups

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to deploy a pair of firewalls in an active/active high availability (HA) architecture.
Which two deployment types are supported in this circumstance? (Choose two.) Select 2 Correct Responses

• A.Layer 3
• B.TAP mode
• C.Virtual Wire
• D.Layer 2

Comment: *

Name: *

Email: *

Verification: *

What are three unique benefits of the Palo Alto Networks Content-ID? (Choose three.) Select 3 Correct Responses

• A.proactively identifying and defending against unknown, new, or custom malware and exploits
• B.micro-segmenting network traffic based on the unique identification number of the content
• C.detecting and preventing known and unknown threats in a single pass
• D.increasing latency as new threat prevention features are enabled
• E.enforcing policy control over unapproved web surfing

Comment: *

Name: *

Email: *

Verification: *