Which profile or policy should be applied to protect against port scans from the internet?

• A.Zone protection profile on the zone of the ingress interface
• B.An App-ID security policy rule to block traffic sourcing from the untrust zone
• C.Interface management profile on the zone of the ingress interface
• D.Security profiles to security policy rules for traffic sourcing from the untrust zone

Comment: *

Name: *

Email: *

Verification: *

A WildFire subscription is required for which two of the following activities? (Choose two)

• A.Filter uniform resource locator (URL) sites by category.
• B.Forward advanced file types from the firewall for analysis.
• C.Use the WildFire Application Programming Interface (API) to submit website links for analysis
• D.Enforce policy based on Host Information Profile (HIP)
• E.Decrypt Secure Sockets Layer (SSL)

Comment: *

Name: *

Email: *

Verification: *

Which three script types can be analyzed in WildFire? (Choose three)

• A.PythonScript
• B.MonoSenpt
• C.JScript
• D.PowerShell Script
• E.VBScript

Comment: *

Name: *

Email: *

Verification: *

When having a customer pre-sales call, which aspects of the NGFW should be covered?

• A.The NGFW simplifies your operations through analytics and automation while giving you consistent protection through exceptional visibility and control across the data center, perimeter, branch, mobile and cloud networks
• B.The Palo Alto Networks-developed URL filtering database, PAN-DB provides high-performance local caching for maximum inline performance on URL lookups, and offers coverage against malicious URLs and IP addresses. As WildFire identifies unknown malware, zero-day exploits, and advanced persistent threats (APTs), the PAN-DB database is updated with information on malicious URLs so that you can block malware downloads and disable Command and Control (C2) communications to protect your network from cyberthreats. URL categories that identify confirmed malicious content - malware, phishing, and C2 are updated every five minutes - to ensure that you can manage access to these sites within minutes of categorization
• C.The NGFW creates tunnels that allow users/systems to connect securely over a public network, as if they were connecting over a local area network (LAN). To set up a VPN tunnel you need a pair of devices that can authenticate each other and encrypt the flow of information between them The devices can be a pair of Palo Alto Networks firewalls, or a Palo Alto Networks firewall along with a VPN-capable device from another vendor
• D.Palo Alto Networks URL Filtering allows you to monitor and control the sites users can access, to prevent phishing attacks by controlling the sites to which users can submit valid corporate credentials, and to enforce safe search for search engines like Google and Bing

Comment: *

Name: *

Email: *

Verification: *

What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

• A.temporarily disable the DNS Security function
• B.discard the request and all subsequent responses
• C.block the query
• D.allow the request and all subsequent responses

Comment: *

Name: *

Email: *

Verification: *