Q24. Which URL Filtering Security Profile action logs the URL Filtering category to the URL Filtering log?

Q25. The firewall determines if a packet is the first packet of a new session or if a packet is part of an existing session using which kind of match?

Q26. Refer to the exhibit.

An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and HOST B (10.1.1.101) receives SSH traffic.) Which two security policy rules will accomplish this configuration? (Choose two.)

Q27. A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to the future site?

Q28. A bootstrap USB flash drive has been prepared using a Windows workstation to load the initial configuration of a Palo Alto Networks firewall that was previously being used in a lab. The USB flash drive was formatted using file system FAT32 and the initial configuration is stored in a file named init-cfg txt. The firewall is currently running PAN-OS 10.0 and using a lab config The contents of init-cfg txi in the USB flash drive are as follows:

The USB flash drive has been inserted in the firewalls’ USB port, and the firewall has been restarted using command:> request resort system Upon restart, the firewall fails to begin the bootstrapping process The failure is caused because

Q29. What is the best description of the HA4 Keep-Alive Threshold (ms)?

Q30. The certificate information displayed in the following image is for which type of certificate?
Exhibit:

Q31. When is the content inspection performed in the packet flow process?

Q32. View the screenshots.


A QoS profile and policy rules are configured as shown. Based on this information, which two statements are correct? (Choose two.)

Q33. Which two statements correctly describe Session 380280? (Choose two.)

Q34. A firewall administrator is trying to identify active routes learned via BGP in the virtual router runtime stats within the GUI. Where can they find this information?

Q35. A user at an external system with the IP address 65.124 57 5 queries the DNS server at 4 2 2 2 for the IP address of the web server www xyz com The DNS server returns an address of 172 16 151 In order to reach the web server, which Security rule and NAT rule must be configured on the firewall?

A)

B)

C)

D)

Q36. Which four NGFW multi-factor authentication factors are supported by PAN-OS? (Choose four.)

Q37. Refer to the diagram. Users at an internal system want to ssh to the SSH server The server is configured to respond only to the ssh requests coming from IP 172.16.16.1.
In order to reach the SSH server only from the Trust zone, which Security rule and NAT rule must be configured on the firewall?

A)

B)

C)

D)

Q38. An administrator needs firewall access on a trusted interface. Which two components are required to configure certificate based, secure authentication to the web Ul? (Choose two )

Q39. Where is information about packet buffer protection logged?

Q40. What are three valid actions in a File Blocking Profile? (Choose three)

Q41. An engineer has been given approval to upgrade their environment 10 PAN-OS 10 2 The environment consists of both physical and virtual firewalls a virtual Panorama HA pair, and virtual log collectors What is the recommended order when upgrading to PAN-OS 10.2?

Q42. An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OS software. The firewall has internet connectivity through an Ethernet interface, but no internet connectivity from the management interface. The Security policy has the default security rules and a rule that allows all web-browsing traffic from any to any zone.
What must the administrator configure so that the PAN-OS software can be upgraded?

Q43. The automated Correlation Engine uses correlation objects to analyze the logs for patterns. When a match occurs:

Q44. Which method will dynamically register tags on the Palo Alto Networks NGFW?

Q45. Which feature prevents the submission of corporate login information into website forms?

Q46. Which tool provides an administrator the ability to see trends in traffic over periods of time, such as threats detected in the last 30 days?

Q47. To connect the Palo Alto Networks firewall to AutoFocus, which setting must be enabled?