Infrastructure Management And CDSS

Which THREE components are required to successfully deploy and use Advanced URL Filtering?

Where is the configuration located to enable the 'DNS Security' service on a specific security zone?

An administrator finds that the 'Threat Prevention' logs are not showing any data, despite having an active subscription. What is the most likely cause?

Which TWO steps are necessary to ensure that 'Threat Prevention' is protecting traffic against known vulnerabilities?

What is the purpose of a 'Security Profile Group'?

What is the primary function of the 'DNS Sinkhole' feature in a DNS Security profile?

Which TWO criteria are used by the firewall to match a security policy rule?

You are configuring Advanced URL Filtering. Users report that a site is being blocked, but the category is 'Newly Registered Domains'. How can you allow access to this specific site while keeping the policy for other newly registered domains?

When managing infrastructure, what is the best practice for handling 'Security Profile Groups'?

A user is blocked by a URL Filtering profile. Where can you find the specific log entry that explains why the block occurred?

A company is experiencing high false-positive rates with WildFire for custom proprietary executable files. What is the recommended configuration to minimize these while maintaining security?

Which THREE types of information can be used to create a custom URL category?

You need to ensure that the firewall logs identify traffic by the actual application name, even if the traffic is running on a non-standard port. Which mechanism makes this possible?

Which TWO actions should be performed when configuring a new DNS Security profile to protect against DNS-based malware?

Which TWO pieces of information are displayed in the 'WildFire Analysis' log?

What is the impact of selecting 'Action: Reset-Both' in a Threat Prevention profile for a detected vulnerability?

Which feature allows you to block traffic based on a specific geographic region?

When managing WildFire, how can you ensure that you are receiving the latest threat signatures as soon as they are generated?

You are deploying Advanced URL Filtering. How does the 'Credential Phishing' prevention feature operate?

Which TWO locations in the PAN-OS web interface are used to check the status of CDSS subscriptions?

How does the 'Advanced URL Filtering' subscription improve upon standard URL Filtering?

An administrator needs to enable Threat Prevention to protect against a specific zero-day exploit. How are the signatures for these new threats delivered to the firewall?

Which action is required to ensure that WildFire analysis results are applied to traffic as quickly as possible?