Troubleshooting

An administrator notices high CPU usage on the management plane. Which command should be used to identify which process is causing the load?

Which THREE items can be used as filters in the 'test security-policy-match' command?

Which TWO of the following actions in a security policy will result in an entry in the Threat Log?

An administrator suspects that a specific App-ID is not correctly identifying traffic. Which log column should they examine to confirm the application match?

Which TWO of the following represent valid interface types on a Palo Alto Networks firewall?

Which THREE of the following are components of the dataplane in the Palo Alto Networks architecture?

A firewall is reporting 'Packet buffer protection' drops. What is the most likely cause of this issue?

A administrator is troubleshooting an intermittent application failure. The Traffic log shows the session is aging out due to 'tcp-rst-from-client'. What is the most effective way to determine if the Palo Alto Networks firewall is prematurely closing the session?

If an administrator needs to check the status of a physical interface to see if it is 'up/up', which CLI command is most appropriate?

An administrator has configured a new NAT rule, but traffic is not traversing it. Which column in the NAT logs is the most useful for verifying the NAT translation is occurring?

Which TWO of the following logs are most useful when troubleshooting a potential Denial of Service (DoS) attack?

A user reports that they are seeing a 'Server Certificate Warning' when accessing an internal site. Which feature should the administrator investigate?

If you are unable to ping a management interface from a remote subnet, what is the first setting you should check?

An administrator wants to verify that a specific Threat Prevention profile is applied to a security rule. Where is the most accurate place to check this?

When an administrator sees 'incomplete' in the Application column of the traffic logs, what does this usually signify?

Which THREE CLI commands help in diagnosing routing issues?

Which log would display an event regarding an administrator logging into the WebUI?

A DHCP server configured on the firewall is not assigning IPs to clients. Which tool is best to troubleshoot the DHCP relay/server process?

Which TWO log types are stored on the Palo Alto Networks firewall locally?

Which TWO of the following settings must be verified to ensure successful SSL Decryption?

Which CLI command is used to verify the current status of the high availability (HA) pair?

When troubleshooting a connection, an administrator sees 'aged-out' in the session table. What does this indicate?

A user reports that they cannot access a website, receiving a 'page cannot be displayed' error. Which log type should the administrator check first to see if the traffic is reaching the firewall?

Traffic is failing the 'Service' check in a security policy. Which CLI tool can be used to confirm which application is being identified for a specific source-destination pair?