Connectivity And Security

An administrator notices intermittent packet loss in a GlobalProtect deployment where users connect via IPv6. Which configuration change is likely to resolve the issue if MTU fragmentation is suspected?

An administrator wants to use DHCP to assign IP addresses to GlobalProtect clients. Where is this setting configured?

Which CLI command is most effective for verifying if a specific packet is being blocked by a security policy in real-time?

When troubleshooting a BGP peering issue between a Palo Alto Networks firewall and an ISP, which log should be reviewed to see state changes and neighbor messages?

When using OSPF with a Palo Alto Networks firewall, which area type would you configure to ensure the firewall does not receive external routing information while still maintaining connectivity to the backbone?

An administrator is configuring a Site-to-Site VPN and needs to ensure that the tunnel interface is included in the routing table. What must be done to ensure traffic can be routed across the tunnel?

Which log type should be filtered if you are searching for specific firewall configuration changes made by an administrator?

A user is unable to access an application via GlobalProtect. The logs show the user is authenticated, but the session is reset. What should the administrator check first?

An administrator needs to restrict access to a specific internal server to only one remote VPN user. What is the most secure method?

An administrator observes that traffic is being correctly identified by App-ID, but the firewall is not applying the expected security profile. What is the most likely reason?

When troubleshooting a site-to-site VPN that is stuck in 'INIT' status, what is the most likely cause?

An administrator is implementing PBF (Policy Based Forwarding). What is a requirement for PBF to function correctly?

What is the result of having two security policies with the same source, destination, and service, but different applications?

Which object type allows you to group multiple IP addresses into a single entity for use in security policies?

Which TWO of the following steps are required to implement a successful Site-to-Site VPN with a third-party vendor?

You are troubleshooting a scenario where internal users cannot access an external server. The traffic log shows the traffic is 'allowed', but the byte count is 0. What is the most likely cause?

Which type of VPN tunnel configuration is required for a Palo Alto Networks firewall to act as a client connecting to a third-party VPN gateway?

Which feature would you use to verify that a specific interface is properly connected to the upstream ISP?

Which THREE tasks are performed by the Dataplane during traffic processing?

Which THREE items must be verified when troubleshooting traffic that is not being correctly identified as the intended application?

Which TWO settings are configured within a GlobalProtect Gateway to manage user access?

Which THREE criteria can be used to define a security policy for granular control?

Which TWO methods can be used to ensure the firewall has the latest threat intelligence for blocking malicious traffic?

Which TWO logs are essential when troubleshooting a user who cannot connect to the internet?

Which THREE components are involved in configuring an IKE Gateway for a VPN?