Free certification test prep

QUESTION 65
Which two features can be enabled to support asymmetric routing with redundancy on a Palo Alto networks next-generation firewall (NGFW)? (Choose two.)

QUESTION 66
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

QUESTION 67
In PAN-OS 10.0 and later, DNS Security allows policy actions to be applied based on which three domains? (Choose three.)

QUESTION 68
Which two products can send logs to the Cortex Data Lake? (Choose two.)

QUESTION 69
A customer is designing a private data center to host their new web application along with a separate headquarters for users.
Which cloud-delivered security service (CDSS) would be recommended for the headquarters only?

QUESTION 70
The WildFire Inline Machine Learning is configured using which Content-ID profiles?

QUESTION 71
Which Security profile on the Next-Generation Firewall (NGFW) includes Signatures to protect against brute force attacks?

QUESTION 72
Which two products are included in the Prisma Brand? (Choose two.)

QUESTION 73
Which three activities can the botnet report track? (Choose three.)

QUESTION 74
Which three new script types can be analyzed in WildFire? (Choose three.)

QUESTION 75
A customer is concerned about malicious activity occurring directly on their endpoints and not visible to their firewalls.
Which three actions does Traps execute during a security event beyond ensuring the prevention of this activity? (Choose three.)

QUESTION 76
What are two core values of the Palo Alto Network Security Platform? (Choose two)

QUESTION 77
Drag and Drop Question
Match the WildFire Inline Machine Learning Model to the correct description for that model.

QUESTION 78
What two types of certificates are used to configure SSL Forward Proxy? (Choose two.)

QUESTION 79
Which two tabs in Panorama can be used to identify templates to define a common base configuration?
(Choose two.)

QUESTION 80
An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites.
The URL categories being chosen by default in the report are not highlighting these types of websites.
How should the SE show the customer the firewall can detect that these websites are being accessed?

QUESTION 81
Which three steps in the cyberattack lifecycle does Palo Alto Networks Security Operating Platform prevent? (Choose three.)

QUESTION 82
What is a best practice when configuring a security policy to completely block a specific application?

QUESTION 83
Which two methods will help avoid Split Brain when running HA in Active/Active mode? (Choose two.)

QUESTION 84
What are two ways to manually add and remove members of dynamic user groups (DUGs)? (Choose two)

QUESTION 85
A prospective customer currently uses a firewall that provides only Layer 4 inspection and protections. The customer sees traffic going to an external destination, port 53, but cannot determine what Layer 7 application traffic is going over that port Which capability of PAN-OS would address the customer’s lack of visibility?

QUESTION 86
Which two new file types are supported on the WF-500 in PAN-OS 9? (Choose two)

QUESTION 87
What helps avoid split brain in active/passive HA pair deployment?

QUESTION 88
True or False: PAN-DB is a service that aligns URLs with category types and is fed to the WildFire threat cloud.

QUESTION 89
A potential customer requires an NGFW solution which enables high-throughput, low-latency network security, all while incorporating unprecedented features and technology. They need a solution that solves the performance problems that plague today’s security infrastructure.
Which aspect of the Palo Alto Networks NGFW capabilities can you highlight to help them address the requirements?