PAN OS Device Setting Configuration

You are configuring a new NGFW and need to ensure administrative access is restricted to a specific management subnet. Which interface setting should you modify to enforce this?

What is the best way to monitor the firewall's CPU and memory usage?

When troubleshooting routing, which command allows you to test the path of a packet?

Where do you configure the DNS servers that the firewall itself uses to resolve hostnames for updates?

What is the purpose of the 'Policy Optimizer' feature?

Which TWO objects can be used to identify traffic in an Application Override policy?

A firewall is experiencing high CPU usage during traffic spikes. You suspect that App-ID is performing too much scanning on internal traffic. Which action should you take to optimize performance while maintaining security?

Which TWO of the following settings are required when configuring a Service Route to ensure the firewall uses a specific interface for external traffic?

When configuring an interface, what is the role of a 'Security Zone'?

A network administrator needs to ensure that internal users can access a public-facing web server located in the DMZ using its public IP address (Hairpin NAT). The policy exists, but traffic is being dropped. Which configuration step is critical to enable this?

What is the default action for the 'interzone-default' security policy?

Which TWO of the following are valid methods to authenticate administrators to the firewall?

Which THREE features are associated with Threat Prevention?

Which TWO of the following are valid methods for an administrator to authenticate to the Palo Alto Networks firewall management plane?

Which THREE steps are involved in the standard User-ID agentless configuration?

What must you do after making any change in the web interface to make it active?

You are experiencing issues with traffic passing through the firewall. What command is used to see the session table in the CLI?

Which TWO items are required to configure a site-to-site IPsec VPN?

How do you back up the firewall's configuration?

An administrator needs to ensure that the firewall uses a specific internal server for DNS resolution of external traffic. Where must this be configured?

How do you ensure that only the most secure TLS versions are used for management access?

You are deploying an HA pair. You need to ensure that the session state is synchronized immediately to prevent drops during a failover. Which setting ensures this?

Which THREE options are available under the 'Actions' tab of a Security Policy?

You are configuring a Security Profile to detect and prevent malware. Which profile is most appropriate for identifying malicious files being downloaded?

What is the consequence of having overlapping IP subnets on different interfaces?

Which configuration object allows you to restrict traffic based on geographic location?

An administrator wants to use a specific user's group membership for policy enforcement. What is the requirement?

Where do you view the system logs to troubleshoot hardware issues?

You are configuring a Palo Alto Networks firewall to support User-ID. You have successfully installed the User-ID agent on a Windows Server and connected it to the firewall. However, the firewall is not mapping IP addresses to usernames. What is the most likely cause?

Which type of interface is used for connecting to a Layer 3 network?

Which TWO types of logs can be forwarded to an external server?

Which THREE components are necessary to successfully implement SSL Forward Proxy?

You notice that the firewall is not identifying traffic as 'web-browsing' even though it is on port 80. What is the most likely cause?

Which action in a security policy should be used to drop traffic silently without sending a notification to the client?

You want to implement User-ID without installing agents on every server. What is the most efficient method to map IP addresses to usernames?

Which TWO settings are required to configure an Interface Management Profile?

Which feature helps to identify and block traffic from compromised hosts based on suspicious behavior?

Which object type should be used to group multiple IP addresses to simplify security policy management?

Which tab allows you to configure the firewall's hostname and domain?

Which tab is used to view real-time log activity?

How do you verify if a security policy is actually matching the traffic you expect?

Which object type should you use to handle large lists of URLs that you want to block or allow?

What is the purpose of the 'Pre-Rulebase' and 'Post-Rulebase' in Panorama?

Which THREE items are part of the 'Device > Setup' configuration?

What is the purpose of a 'Zone' in a Palo Alto Networks firewall?

Which tab is used to configure logging settings for a specific security policy?

Which TWO types of NAT are supported in PAN-OS?

What happens if a packet matches no security policies?

You have configured a GlobalProtect VPN, but users cannot access internal resources. What is the first troubleshooting step?

Which TWO objects can be used as a source in a Security Policy?

Which feature must be enabled to inspect traffic for threats?

What is the recommended way to manage certificates on a Palo Alto Networks firewall?

How do you ensure that the firewall automatically blocks traffic from a list of known malicious IP addresses?

Which THREE items are found under the 'Network' tab?

An administrator wants to ensure that internal users only access approved websites. Which profile is used?

You have configured an IPsec VPN tunnel between two sites, but the tunnel status shows 'init-passive' and never transitions to 'up'. What is the most likely configuration error?

If you have a primary and secondary firewall, what is the best way to synchronize configuration changes?

Which TWO items can be configured in a Virtual Router?

What is the primary function of a Security Profile Group?

Which object should be configured for a server that needs to be accessed from the internet via a public IP?

How do you ensure that a specific security policy rule is only active during business hours?

Which TWO authentication protocols are commonly supported by PAN-OS for VPN user authentication?

You are configuring a new Security Policy. Which TWO settings are required to enable App-ID enforcement for a rule?

Which TWO features require a valid subscription license?

When configuring NAT, which option allows the firewall to preserve the original source IP of the traffic?

You need to perform a packet capture on a specific firewall interface. Which tool is used?

An administrator needs to identify the cause of intermittent connectivity drops for a specific application. What feature provides the most granular visibility?

You are managing a firewall and need to ensure that dynamic updates are downloaded automatically. Where do you configure the schedule for these updates?

What is the recommended method to update the firewall's threat signatures?

You are configuring a new Palo Alto Networks firewall and need to ensure that the management interface is only accessible from a specific subnet. Which configuration component is used to achieve this?

Which feature is used to ensure the firewall clock is accurate?

Which THREE settings can be modified in a custom Antivirus Profile?

Which tab in the web interface is used to create and manage security policies?