NGFW And SASE Solution Functionality

You have a Security Policy rule allowing 'web-browsing' and 'ssl'. A user cannot access a specific site, and the logs show the traffic as 'web-browsing' but failing a specific Security Profile. Which action is most appropriate?

You are troubleshooting a performance issue in Prisma Access. Users report slow access to SaaS applications. You suspect the issue is related to the path selection. Which tool should you use to analyze the latency between the user's mobile client and the Service Connection?

When using User-ID with Active Directory, what is the primary purpose of the User-ID Agent?

Which Content-ID component specifically prevents the exfiltration of sensitive data like credit card numbers?

A administrator needs to ensure that users are authenticated before accessing a web-based internal application. Which User-ID method provides the most granular control by prompting users via a captive portal?

You are migrating an existing branch office to Prisma Access. Which component is required to allow the branch to communicate with your on-premises data center?

What is the effect of setting a Security Policy rule action to 'Drop' versus 'Reset-Both'?

You are configuring App-ID for an application that uses non-standard ports. You have created a custom application object, but the traffic is still being identified as 'incomplete'. What is the most likely reason?

In a Prisma Access environment, how does the system ensure that a user always connects to the geographically nearest location?

What happens when a security policy rule is set to 'Log at Session End'?

An administrator wants to categorize traffic based on the 'Server' role in the network. Which feature should be used to tag this traffic for policy grouping?

If a packet matches a Security Policy rule, but the application is not identified yet, what action does the firewall take?

Which NGFW feature allows for the inspection of files for malicious content based on signatures and heuristic analysis?

When configuring SSL Forward Proxy, which step is mandatory for the firewall to successfully inspect encrypted traffic?

You are configuring a 'Strict' security profile for a web server. Which profile action is best suited to block known exploit patterns while allowing the traffic?

Which command is used to display the current User-ID mapping information on the CLI?

You are setting up an SSL Decryption policy. If you want to exclude traffic to financial websites to comply with privacy laws, how do you configure it?

You need to ensure that traffic between two internal zones is inspected for threats. What must be configured on the Security Policy?

In Prisma Access, what is the role of the 'Compute Location' setting?

What is the purpose of the 'Pre-Rule' and 'Post-Rule' sections in a Panorama-managed firewall?

When a user connects via GlobalProtect, how does the firewall identify the user if they are not in the AD group?

You are configuring an SD-WAN path for a branch office. Which metric does the firewall use to determine the best path when multiple paths are available?

Which TWO of the following are valid log types available on the Palo Alto Networks firewall?

Which TWO of the following are valid methods for mapping IP addresses to usernames in a Palo Alto Networks NGFW?

Which action in a Security Profile allows you to permit traffic but generate an alert in the logs?

Which TWO of the following are benefits of using App-ID over port-based security policies?

Which THREE of the following are considered 'App-ID' identification techniques?

Which TWO of the following are valid ways to deploy GlobalProtect?

Which THREE components are involved in the Prisma Access architecture for protecting mobile users?

Which THREE of the following are actions that can be taken when a file is detected by a File Blocking Profile?

Which TWO of the following are features of Content-ID?

Which THREE of the following are settings that can be configured in a URL Filtering profile?

Which THREE of the following items are required to successfully deploy a Prisma Access Service Connection?

Which TWO of the following are types of security policies supported by the NGFW?