Connectivity And Security

Which log type should be filtered if you are searching for specific firewall configuration changes made by an administrator?

Which TWO of the following steps are required to implement a successful Site-to-Site VPN with a third-party vendor?

Which THREE components are involved in configuring an IKE Gateway for a VPN?

When using OSPF with a Palo Alto Networks firewall, which area type would you configure to ensure the firewall does not receive external routing information while still maintaining connectivity to the backbone?

Which THREE criteria can be used to define a security policy for granular control?

An administrator observes that traffic is being correctly identified by App-ID, but the firewall is not applying the expected security profile. What is the most likely reason?

Which TWO settings are configured within a GlobalProtect Gateway to manage user access?

Which THREE tasks are performed by the Dataplane during traffic processing?

When troubleshooting a site-to-site VPN that is stuck in 'INIT' status, what is the most likely cause?

When troubleshooting a BGP peering issue between a Palo Alto Networks firewall and an ISP, which log should be reviewed to see state changes and neighbor messages?

A user is unable to access an application via GlobalProtect. The logs show the user is authenticated, but the session is reset. What should the administrator check first?

Which CLI command is most effective for verifying if a specific packet is being blocked by a security policy in real-time?

You are troubleshooting a scenario where internal users cannot access an external server. The traffic log shows the traffic is 'allowed', but the byte count is 0. What is the most likely cause?

Which feature would you use to verify that a specific interface is properly connected to the upstream ISP?

Which object type allows you to group multiple IP addresses into a single entity for use in security policies?

What is the result of having two security policies with the same source, destination, and service, but different applications?

An administrator notices intermittent packet loss in a GlobalProtect deployment where users connect via IPv6. Which configuration change is likely to resolve the issue if MTU fragmentation is suspected?

An administrator wants to use DHCP to assign IP addresses to GlobalProtect clients. Where is this setting configured?

An administrator is implementing PBF (Policy Based Forwarding). What is a requirement for PBF to function correctly?

Which THREE items must be verified when troubleshooting traffic that is not being correctly identified as the intended application?

Which type of VPN tunnel configuration is required for a Palo Alto Networks firewall to act as a client connecting to a third-party VPN gateway?

An administrator needs to restrict access to a specific internal server to only one remote VPN user. What is the most secure method?

Which TWO logs are essential when troubleshooting a user who cannot connect to the internet?

Which TWO methods can be used to ensure the firewall has the latest threat intelligence for blocking malicious traffic?

An administrator is configuring a Site-to-Site VPN and needs to ensure that the tunnel interface is included in the routing table. What must be done to ensure traffic can be routed across the tunnel?