Palo Alto Next-Generation Firewall Engineer Exam Materials - Question #57 Discussion
What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall?
10 Certification Products • 189 Comments • 1110 Questions
What is a valid configurable limit for setting resource quotas when defining a new VSYS on a Palo Alto Networks firewall?
Which two services are configured by applying an SSL/TLS service profile?
An NGFW engineer is configuring multiple Panorama-managed firewalls to start sending all logs to Strata Logging Service. The Strata Logging Service instance has been provisioned, the required device certificates have been installed, and Panorama and the firewalls have been succes...
When deploying Palo Alto Networks NGFWs in a cloud service provider (CSP) environment, which method ensures high availability (HA) across multiple availability zones?
Which two types of logs must be forwarded to Strata Logging Service for IoT Security to function?
When using the traffic replication feature in Prisma Access, where is the mirrored traffic directed for analysis?
An organization is deploying Prisma Access Colo-Connect with a partner interconnect to achieve high-bandwidth connectivity to its colocation facility. The administrator must ensure the on-premises equipment is compatible with the required tunneling method. Which overlay protoc...
A network administrator is configuring Prisma Browser policies to enhance web security and wants to ensure that search engine results presented to users are filtered for explicit content by the search engines. Which security feature of Prisma Browser enforces this behavior?
Which Routing Preference Manipulates BGP Preference/attributes for Mobile users traffic leaves Service connection?
When Configuring Enterprise DLP, which method would reduce the false positives to Detect accurately Bank account number?
A university uses Cloud Identity Engine (CIE) to integrate identity information from a Google Workspace directory for students and an on-premises Active Directory (AD) for faculty. The firewalls securing the faculty network should not process or store any student identity data....
A network engineer is configuring SSL Forward Proxy decryption on a Palo Alto Networks firewall. The company's internal clients trust a corporate root certificate authority (CA). To ensure the firewall can properly validate the certificates of external web servers, the engineer...
Which two configurations are required when creating deployment profiles to migrate a perpetual VM-Series firewall to a flexible VM?
How does a firewall behave when SSL Inbound Inspection is enabled?
An organization is preparing to consolidate its user identity management into an Okta SAML-based solution. Currently, firewalls use a RADIUS server for Authentication Portal authentication. During the migration phase, both authentication methods need to coexist. The desired behav...
Based on the image below, which data source type should be investigated?
A development team is using Cortex Cloud for a centralized view to monitor and analyze application security posture. Which two components of Cortex Cloud will enable secure software development in this scenario?
What is the automated method for Cortex Cloud to organize both a report by cloud type and a compliance benchmark that contains critical compliance issues to track over a 30-day threshold?
How is internal proprietary source code classified?
Which sensor is used by Cortex XSIAM to identify and collect DNS queries, HTTP headers, and DHCP information?