問題1
An administrator is informed that the engineer who previously managed all the VPNs has left the company.
According to company policies the administrator must update all the IPSec VPNs with new pre-shared keys Where are the pre-shared keys located on the firewall?
An administrator is informed that the engineer who previously managed all the VPNs has left the company.
According to company policies the administrator must update all the IPSec VPNs with new pre-shared keys Where are the pre-shared keys located on the firewall?
正確答案: C
問題2
An administrator wants to enable WildFire inline machine learning. Which three file types does WildFire inline ML analyze? (Choose three.)
An administrator wants to enable WildFire inline machine learning. Which three file types does WildFire inline ML analyze? (Choose three.)
正確答案: B,C,E
問題3
Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)
Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)
正確答案: C,E
問題4
Based on the images below, what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?

Based on the images below, what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?
Based on the images below, what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?

Based on the images below, what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?
正確答案: B
問題5
A decryption policy has been created with an action of "No Decryption." The decryption profile is configured in alignment to best practices.
What protections does this policy provide to the enterprise?
A decryption policy has been created with an action of "No Decryption." The decryption profile is configured in alignment to best practices.
What protections does this policy provide to the enterprise?
正確答案: A
問題6
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 10.1 version?
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 10.1 version?
正確答案: D
問題7
An administrator is building Security rules within a device group to block traffic to and from malicious locations.
How should those rules be configured to ensure that they are evaluated with a high priority?
An administrator is building Security rules within a device group to block traffic to and from malicious locations.
How should those rules be configured to ensure that they are evaluated with a high priority?
正確答案: D
說明:(僅 NewDumps 成員可見)
問題8
Which two profiles should be configured when sharing tags from threat logs with a remote User-ID agent?
(Choose two.)
Which two profiles should be configured when sharing tags from threat logs with a remote User-ID agent?
(Choose two.)
正確答案: C,D
說明:(僅 NewDumps 成員可見)
問題9
Which three sessions are created by a NGFW for web proxy? (Choose three.)
Which three sessions are created by a NGFW for web proxy? (Choose three.)
正確答案: B,D,E
問題10
Which two key exchange algorithms consume the most resources when decrypting SSL traffic? (Choose two.)
Which two key exchange algorithms consume the most resources when decrypting SSL traffic? (Choose two.)
正確答案: A,B
說明:(僅 NewDumps 成員可見)
問題11
As a best practice, logging at session start should be used in which case?
As a best practice, logging at session start should be used in which case?
正確答案: C
問題12
A company uses GlobalProtect for its VPN and wants to allow access to users who have only an endpoint solution installed. Which sequence of configuration steps will allow access only for hosts that have antivirus or anti-spyware enabled?
A company uses GlobalProtect for its VPN and wants to allow access to users who have only an endpoint solution installed. Which sequence of configuration steps will allow access only for hosts that have antivirus or anti-spyware enabled?
正確答案: D