NGFW And SASE Solution Functionality

You have a Security Policy rule allowing 'web-browsing' and 'ssl'. A user cannot access a specific site, and the logs show the traffic as 'web-browsing' but failing a specific Security Profile. Which action is most appropriate?

You need to ensure that traffic between two internal zones is inspected for threats. What must be configured on the Security Policy?

An administrator wants to categorize traffic based on the 'Server' role in the network. Which feature should be used to tag this traffic for policy grouping?

Which TWO of the following are valid ways to deploy GlobalProtect?

A administrator needs to ensure that users are authenticated before accessing a web-based internal application. Which User-ID method provides the most granular control by prompting users via a captive portal?

Which command is used to display the current User-ID mapping information on the CLI?

Which TWO of the following are features of Content-ID?

You are setting up an SSL Decryption policy. If you want to exclude traffic to financial websites to comply with privacy laws, how do you configure it?

Which TWO of the following are benefits of using App-ID over port-based security policies?

If a packet matches a Security Policy rule, but the application is not identified yet, what action does the firewall take?

Which THREE components are involved in the Prisma Access architecture for protecting mobile users?

When a user connects via GlobalProtect, how does the firewall identify the user if they are not in the AD group?

You are troubleshooting a performance issue in Prisma Access. Users report slow access to SaaS applications. You suspect the issue is related to the path selection. Which tool should you use to analyze the latency between the user's mobile client and the Service Connection?

What is the purpose of the 'Pre-Rule' and 'Post-Rule' sections in a Panorama-managed firewall?

Which TWO of the following are valid log types available on the Palo Alto Networks firewall?

Which THREE of the following are actions that can be taken when a file is detected by a File Blocking Profile?

Which NGFW feature allows for the inspection of files for malicious content based on signatures and heuristic analysis?

You are configuring an SD-WAN path for a branch office. Which metric does the firewall use to determine the best path when multiple paths are available?

When configuring SSL Forward Proxy, which step is mandatory for the firewall to successfully inspect encrypted traffic?

You are configuring App-ID for an application that uses non-standard ports. You have created a custom application object, but the traffic is still being identified as 'incomplete'. What is the most likely reason?

Which TWO of the following are types of security policies supported by the NGFW?

Which Content-ID component specifically prevents the exfiltration of sensitive data like credit card numbers?

What happens when a security policy rule is set to 'Log at Session End'?

Which TWO of the following are valid methods for mapping IP addresses to usernames in a Palo Alto Networks NGFW?

In a Prisma Access environment, how does the system ensure that a user always connects to the geographically nearest location?

You are migrating an existing branch office to Prisma Access. Which component is required to allow the branch to communicate with your on-premises data center?

You are configuring a 'Strict' security profile for a web server. Which profile action is best suited to block known exploit patterns while allowing the traffic?

In Prisma Access, what is the role of the 'Compute Location' setting?

When using User-ID with Active Directory, what is the primary purpose of the User-ID Agent?

Which action in a Security Profile allows you to permit traffic but generate an alert in the logs?

Which THREE of the following are settings that can be configured in a URL Filtering profile?

What is the effect of setting a Security Policy rule action to 'Drop' versus 'Reset-Both'?

Which THREE of the following are considered 'App-ID' identification techniques?

Which THREE of the following items are required to successfully deploy a Prisma Access Service Connection?