The botnet report displays a confidence score of 1 to 5 indicating the likelihood of a botnet infection.
Which three sources are used by the firewall as the basis of this score? (Choose three.)

• A.Bad Certificate Reports
• B.Traffic Type
• C.Botnet Reports
• D.Number of Events
• E.Executable Downloads
• F.Threat Landscape

Comment: *

Name: *

Email: *

Verification: *

A customer with a legacy firewall architecture is focused on port and protocol level security, and has heard that next generation firewalls open all ports by default.
What is the appropriate rebuttal that positions the value of a NGFW over a legacy firewall?

• A.Palo Alto Networks does not consider port information, instead relying on App-ID signatures that do not reference ports
• B.Default policies block all interzone traffic. Palo Alto Networks empowers you to control applications by default ports or a configurable list of approved ports on a per-policy basis
• C.Palo Alto Networks keep ports closed by default, only opening ports after understanding the application request, and then opening only the application-specified ports
• D.Palo Alto Networks NGFW protects all applications on all ports while leaving all ports opened by default

Comment: *

Name: *

Email: *

Verification: *

How frequently do WildFire signatures move into the antivirus database?

• A.every 24 hours
• B.every 12 hours
• C.once a week
• D.every 1 hour

Comment: *

Name: *

Email: *

Verification: *

What are three sources of malware sample data for the Threat Intelligence Cloud? (Choose three)

• A.Next-generation firewalls deployed with WildFire Analysis Security Profiles
• B.WF-500 configured as private clouds for privacy concerns
• C.Correlation Objects generated by AutoFocus
• D.Third-party data feeds such as partnership with ProofPomt and the Cyber Threat Alliance
• E.Palo Alto Networks non-firewall products such as Traps and Prisma SaaS

Comment: *

Name: *

Email: *

Verification: *

What helps avoid split brain in active / passive high availability (HA) pair deployment?

• A.Use a standard traffic interface as the HA3 link.
• B.Use a standard traffic interface as the HA2 backup
• C.Use the management interface as the HA1 backup link
• D.Enable preemption on both firewalls in the HA pair.

Comment: *

Name: *

Email: *

Verification: *