NEW QUESTION 71
An engineer is troubleshooting traffic routing through the virtual router. The firewall uses multiple routing protocols, and the engineer is trying to determine routing priority Match the default Administrative Distances for each routing protocol.

NEW QUESTION 72
Which three multi-factor authentication methods can be used to authenticate access to the firewall? (Choose three.)

NEW QUESTION 73
What is exchanged through the HA2 link?

NEW QUESTION 74
A network administrator troubleshoots a VPN issue and suspects an IKE Crypto mismatch between peers.
Where can the administrator find the corresponding logs after running a test command to initiate the VPN?

NEW QUESTION 75
An engineer needs to see how many existing SSL decryption sessions are traversing a firewall What command should be used?

NEW QUESTION 76
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects.
How would an administrator configure the interface to 1Gbps?

NEW QUESTION 77
An engineer is tasked with configuring a Zone Protection profile on the untrust zone.
Which three settings can be configured on a Zone Protection profile? (Choose three.)

NEW QUESTION 78
in a template you can configure which two objects? (Choose two.)

NEW QUESTION 79
How is the Forward Untrust Certificate used?

NEW QUESTION 80
An administrator wants to upgrade an NGFW from PAN-OS® 7.1.2 to PAN-OS® 8.0.2. The firewall is not a part of an HA pair.
What needs to be updated first?

NEW QUESTION 81
Place the steps in the WildFire process workflow in their correct order.

NEW QUESTION 82
True or False: DSRI degrades the performance of a firewall?

NEW QUESTION 83
Which Panorama feature allows for logs generated by Panorama to be forwarded to an external Security Information and Event Management(SIEM) system?

NEW QUESTION 84
When an engineer configures an active/active high availability pair, which two links can they use? (Choose two)

NEW QUESTION 85
Which two factors should be considered when sizing a decryption firewall de-ployment? (Choose two.)

NEW QUESTION 86
Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a “No Decrypt” action? (Choose two.)

NEW QUESTION 87
How can Panorama help with troubleshooting problems such as high CPU or resource exhaustion on a managed firewall?

NEW QUESTION 88
Site-A and Site-B have a site-to-site VPN set up between them. OSPF is configured to dynamically create the routes between the sites. The OSPF configuration in Site-A is configured properly, but the route for the tunner is not being established. The Site-B interfaces in the graphic are using a broadcast Link Type. The administrator has determined that the OSPF configuration in Site-B is using the wrong Link Type for one of its interfaces.

Which Link Type setting will correct the error?

NEW QUESTION 89
Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

NEW QUESTION 90
A firewall engineer creates a destination static NAT rule to allow traffic from the internet to a webserver hosted behind the edge firewall. The pre-NAT IP address of the server is 153.6 12.10, and the post-NAT IP address is 192.168.10.10. Refer to the routing and interfaces information below.


What should the NAT rule destination zone be set to?