NO.39 Which processing order will be enabled when a panorama administrator selects the setting “Objects defined in ancestors will takes higher precedence?

NO.40 A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny”.
Which action will this configuration cause on the matched traffic?

NO.41 How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

NO.42 What will be the egress interface if the traffic’s ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.

NO.43 Which CLI command enables an administrator to view detail about the firewall including uptime. PAN -OS version, and serial number?

NO.44 Which virtual router feature determines if a specific destination IP address is reachable’?

NO.45 An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. How would the administrator establish the chain of trust?

NO.46 An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs.
The administrator assigns priority 100 to the active firewall.
Which priority is collect tot the passive firewall?

NO.47 An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?

NO.48 The firewall identified a popular application as a unknown-tcp. Which options are available to identify the application? (Choose two.)

NO.49 The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.
Which two options would help the administrator Troubleshoot this issue? (Choose two.)

NO.50 An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)

NO.51 Which feature prevents the submission of corporate login information into website forms?

NO.52 How does Panorama prompt VMware NSX to quarantine an in6erface VM??

NO.53 An administrator needs to optimize traffic to prefer business-critical applications over non-critical applications.
QoS natively integrates with which feature to provide service quality?

NO.54 When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinhole enabled, generating a traffic log.
What will be the destination IP Address in that log entry?

NO.55 An administrator deploys PA-500 NGFWs as an active/passive high availability pair . The devices are not participating in dynamic router and preemption is disabled.
What must be verified to upgrade the firewalls to the most recent version of PAN OS software?

NO.56 Winch three steps will reduce the CPU utilization on the management plane? (Choose three. ) Disable logging at session start in Security policies.

NO.57 What are two benefits of nested device groups in panorama? (Choose two )

NO.58 Which three options are supposed in HA Lite? (Choose three.)

NO.59 An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables logs forwarding from the firewalls to panorama Pre-existing logs from the firewall are not appearing in Panorama.
Which action would enables the firewalls to send their preexisting logs to Panorama?

NO.60 A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?

NO.61 Which two methods can be configured to validate the revocation status of a certificate? (Choose two)