Which profile or policy should be applied to protect against port scans from the internet?

• A.An App-ID security policy rule to block traffic sourcing from the untrust zone
• B.Interface management profile on the zone of the ingress interface
• C.Security profiles to security policy rules for traffic sourcing from the untrust zone
• D.Zone protection profile on the zone of the ingress interface

Comment: *

Name: *

Email: *

Verification: *

Which Palo Alto Networks pre-sales tool involves approximately 4 hour interview to discuss a customer's current security posture?

• A.SLR
• B.Expedition
• C.BPA
• D.PPA

Comment: *

Name: *

Email: *

Verification: *

Which statement best describes the business value of Palo Alto Networks Zero Touch Provisioning (ZTP)?

• A.It allows a firewall to be automatically connected to the local network wirelessly
• B.It is designed to simplify and automate the onboarding of new firewalls to the Panorama management server.
• C.When it is in place, it removes the need for an onsite firewall
• D.When the service is purchased, Palo Alto Networks sends an engineer to physically deploy the firewall to the customer environment

Comment: *

Name: *

Email: *

Verification: *

A packet that is already associated with a current session arrives at the firewall. What is the flow of the packet after the firewall determines that it is matched with an existing session?

• A.It is sent through the slow path for further inspection. If subject to content inspection, it will pass through a single stream-based content inspection engines before egress
• B.It is sent through the slow path for further inspection. If subject to content inspection, it will pass through multiple content inspection engines before egress
• C.It is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through multiple content inspection engines before egress
• D.it is sent through the fast path because session establishment is not required. If subject to content inspection, it will pass through a single stream-based content inspection engine before egress.

Comment: *

Name: *

Email: *

Verification: *

A customer is starting to understand their Zero Trust protect surface using the Palo Alto Networks Zero Trust reference architecture.
What are two steps in this process? (Choose two.)

• A.Gain visibility of and control over applications and functionality in the traffic flow using a port and protocol firewall
• B.Validate user identities through authentication
• C.Categorize data and applications by levels of sensitivity
• D.Prioritize securing the endpoints of privileged users because if non-privileged user endpoints are exploited, the impact will be minimal due to perimeter controls

Comment: *

Name: *

Email: *

Verification: *