QUESTION 50
The Aggregate Ethernet interface is showing down on a passive PA-7050 firewall of an active/passive HA pair. The HA Passive Link State is set to “Auto” under Device > High Availability > General > Active/Passive Settings. The AE interface is configured with LACP enabled and is up only on the active firewall.
Why is the AE interface showing down on the passive firewall?

QUESTION 51
A company has configured GlobalProtect to allow their users to work from home. A decrease in performance for remote workers has been reported during peak-use hours.
Which two steps are likely to mitigate the issue? (Choose TWO)

QUESTION 52
An engineer troubleshoots a high availability (HA) link that is unreliable.
Where can the engineer view what time the interface went down?

QUESTION 53
What is considered the best practice with regards to zone protection?

QUESTION 54
A firewall administrator wants to have visibility on one segment of the company network. The traffic on the segment is routed on the Backbone switch. The administrator is planning to apply Security rules on segment X after getting the visibility.
There is already a PAN-OS firewall used in L3 mode as an internet gateway, and there are enough system resources to get extra traffic on the firewall. The administrator needs to complete this operation with minimum service interruptions and without making any IP changes.
What is the best option for the administrator to take?

QUESTION 55
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewall use Layer 3 interfaces to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?

QUESTION 56
Refer to the exhibit.

Based on the screenshots above what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?

QUESTION 57
Which protection feature is available only in a Zone Protection Profile?

QUESTION 58
Review the information below. A firewall engineer creates a U-NAT rule to allow users in the trust zone access to a server in the same zone by using an external, public NAT IP for that server.
Given the rule below, what change should be made to make sure the NAT works as expected?

QUESTION 59
Which protocol is supported by GlobalProtect Clientless VPN?

QUESTION 60
Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OS® software?

QUESTION 61
Based on the screenshots above, and with no configuration inside the Template Stack itself, what access will the device permit on its Management port?

QUESTION 62
A system administrator runs a port scan using the company tool as part of vulnerability check. The administrator finds that the scan is identified as a threat and is dropped by the firewall. After further investigating the logs, the administrator finds that the scan is dropped in the Threat Logs.
What should the administrator do to allow the tool to scan through the firewall?

QUESTION 63
How does Panorama prompt VMWare NSX to quarantine an infected VM?

QUESTION 64
Which statement accurately describes service routes and virtual systems?

QUESTION 65
A firewall administrator requires an A/P HA pair to fail over more quickly due to critical business application uptime requirements.
What is the correct setting?

QUESTION 66
An engineer is attempting to resolve an issue with slow traffic.
Which PAN-OS feature can be used to prioritize certain network traffic?

QUESTION 67
A customer is replacing their legacy remote access VPN solution The current solution is in place to secure only internet egress for the connected clients Prisma Access has been selected to replace the current remote access VPN solution During onboarding the following options and licenses were selected and enabled
– Prisma Access for Remote Networks 300Mbps
– Prisma Access for Mobile Users 1500 Users
– Cortex Data Lake 2TB
– Trusted Zones trust
– Untrusted Zones untrust
– Parent Device Group shared
How can you configure Prisma Access to provide the same level of access as the current VPN solution?

QUESTION 68
Which steps should an engineer take to forward system logs to email?

QUESTION 69
A network administrator wants to use a certificate for the SSL/TLS Service Profile Which type of certificate should the administrator use?