Platform Solutions Services And Tools

An administrator is using the Palo Alto Networks Expedition tool to migrate a configuration from a competitor firewall to a Palo Alto Networks firewall. After importing the competitor's configuration, the administrator notices that some rules are not being translated correctly. Which step should the administrator take to improve the translation accuracy?

You are troubleshooting a connectivity issue between an SCM-managed firewall and the SCM cloud service. Which log source in the firewall UI provides the most detailed information regarding the management connection?

An administrator is using Strata Cloud Manager to manage a large number of firewalls. They need to generate a report that shows which security policy rules are unused across all managed firewalls over the past 90 days. The report should help identify rules that can be safely removed to improve performance. Which Strata Cloud Manager feature should be used?

When managing multiple firewalls in Panorama, what is the best practice for handling software image updates?

A security engineer is using the Palo Alto Networks Expedition tool to migrate a configuration from a Cisco ASA firewall to a Palo Alto Networks firewall. After importing the ASA configuration, the engineer notices that some access control rules are not being translated correctly. What is the most likely cause?

Which TWO actions should an administrator perform to prepare for a large-scale firmware upgrade across an enterprise using Panorama?

You are troubleshooting an issue where a specific Threat Prevention profile is not applying correctly via Panorama. The setting is configured in a Template, but the firewall shows a different value. What should you check?

When migrating from Panorama to SCM, what happens to the existing log data stored on the Panorama appliance?

A security engineer is using the firewall's REST API to retrieve the current list of all security rules in the 'vsys1' virtual system. The engineer wants to receive the response in JSON format. Which API request should be used?

An administrator is unable to push a configuration to a firewall managed by Panorama. The error message indicates a 'Template conflict'. What is the most likely cause?

A network security engineer needs to verify that a newly created security policy in Strata Cloud Manager will not block critical business applications. The engineer wants to simulate the policy against recent traffic logs without enforcing it. Which Strata Cloud Manager feature should be used?

A security administrator is deploying a new Palo Alto Networks next-generation firewall in a remote branch office. The branch has limited on-site IT staff and no dedicated management server. The administrator wants to centrally manage this firewall, push security policies, and monitor traffic without deploying Panorama. Which Palo Alto Networks cloud-delivered service should be used?

When a firewall is managed by Panorama, where is the authoritative configuration stored?

A network security administrator is using the Palo Alto Networks Best Practice Assessment (BPA) tool to evaluate the security posture of a firewall. The BPA report shows a low score in the 'Security Policy' category due to overly permissive rules. Which action should the administrator take to improve the score while maintaining necessary access?

Which TWO steps are involved in the process of replacing a failed firewall that is managed by Panorama?

Which TWO factors contribute to 'Configuration Drift' between a firewall and Panorama?

Which SCM feature allows you to view the health status of your entire global firewall deployment?

Which THREE configuration elements are commonly managed via Panorama Templates?

Which feature in Strata Cloud Manager allows you to verify that a configuration change complies with security best practices before it is pushed to devices?

Where do you generate a 'Device Deployment' token for adding a new firewall to Strata Cloud Manager?

A security operations team is using Strata Cloud Manager to monitor firewall health. They want to receive alerts when a managed firewall's CPU utilization exceeds 80% for more than 10 minutes. Which Strata Cloud Manager capability should they configure?

A security operations team is using the NetSec-Pro 'Policy Optimizer' to review rule usage. They notice that a rule allowing 'any' application on port 80 has a high session count but no application identification. They want to safely transition this rule to a more secure, application-based rule. Which action should they take first according to best practices?

An administrator managing 200 Palo Alto Networks firewalls with Strata Cloud Manager needs to rapidly deploy a new decryption policy only to firewalls in the European branch offices, which are identified by the region tag 'EU'. The administrator wants to avoid manual per-firewall configuration and ensure the policy is applied consistently. Which SCM feature should the administrator use?

A NetSec-Pro administrator needs to verify that a newly configured security policy on a Palo Alto Networks firewall is correctly logging traffic to an external syslog server. The administrator has already configured the Log Forwarding profile and syslog server. Which tool in the firewall's web interface should the administrator use to view real-time logs and confirm that they are being forwarded?

You are using SCM to manage firewall policies. You want to audit who made a specific change to a security policy rule. Which feature should you use?

You need to create a global address object that is available to all firewalls managed by Panorama. Where should you define this?

Which THREE types of information are contained in the Panorama 'Device Health' report?

A network security administrator needs to ensure that the Palo Alto Networks firewall can resolve domain names for security policy enforcement. Which service should be configured on the firewall?

What is the primary function of the 'Panorama' context in the Web UI of a managed firewall?

A NetSec-Pro administrator is using the Strata Cloud Manager to manage security policies across multiple tenants. The administrator wants to create a policy rule that applies to all tenants but with the ability to override it in a specific tenant if needed. Which Strata Cloud Manager feature should the administrator use to achieve this?

You are managing firewalls across multiple time zones using Panorama. Where do you configure the time zone for the managed firewalls?

Which tool in the Palo Alto Networks ecosystem is best suited for centralized visibility and reporting across an entire enterprise?

When using Panorama, an administrator wants to push policies to specific firewalls based on their geographical location. Which feature should be used?

A security administrator needs to allow the NetSec-Pro management plane to authenticate firewall administrators against the corporate Microsoft Active Directory. The AD servers are reachable only on the internal network. Which server profile type should the administrator configure on the firewall to meet this requirement?

You are configuring 'Log Forwarding' from Panorama to an external SIEM. Which object must you define in Panorama to facilitate this?

An administrator notices that the 'Commit' progress on Panorama hangs at 99%. What is the most effective way to troubleshoot this?

Which THREE items are included in a Panorama configuration 'Export'?

Which TWO of the following are benefits of using Strata Cloud Manager over traditional on-premises Panorama?

An administrator is using the Strata Cloud Manager API to programmatically create a security rule. The API request fails with a 400 Bad Request error. The administrator has verified that the authentication token is valid and the endpoint URL is correct. Which of the following is the most likely cause of the error?

A security engineer is configuring a NetSec-Pro appliance to forward logs to an external SIEM using syslog. The SIEM requires that logs be sent over TCP with TLS encryption for compliance. The engineer configures a syslog server profile with the SIEM's IP address and port 6514, and selects 'SSL' as the transport. However, the SIEM is not receiving any logs. Which of the following is the most likely cause of the failure?

A network security administrator is configuring a firewall to forward logs to an external syslog server. The syslog server uses a non-standard port and requires TCP for reliability. Which log forwarding destination configuration should the administrator use?

A NetSec-Pro administrator is using the Strata Cloud Manager API to automate the retrieval of security policy rule hit counts across multiple tenants. The API calls are failing with HTTP 403 errors. The administrator has verified that the API key is valid and has not expired. Which of the following is the most likely cause of the 403 errors?

A network administrator is configuring a NetSec-Pro firewall to send alerts to an external email server when a critical threat is detected. They navigate to the 'Log Settings' under the 'Device' tab and configure the email server profile. Which additional step is required to ensure that threat logs trigger email notifications?