1. A Palo Alto Networks NGFW just submitted a file to WildFire for analysis. Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.

How quickly will the firewall receive back a verdict?

2. To connect the Palo Alto Networks firewall to AutoFocus, which setting must be enabled?

3. An administrator has left a firewall to use the default port for all management services. Which three functions are
performed by the dataplane? (Choose three.)

4. When configuring a GlobalProtect Portal, what is the purpose of specifying an Authentication Profile?

5. A session in the Traffic log is reporting the application as “incomplete.”

What does “incomplete” mean?

6. An administrator needs to determine why users on the trust zone cannot reach certain websites. The only information available is shown on the following image.

Which configuration change should the administrator make?

7.

8. In the image, what caused the commit warning?

9. Decrypted packets from the website https://www.microsoft.com will appear as which application and service within the Traffic log?

10. A company needs to preconfigure firewalls to be sent to remote sites with the least amount of
preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.

Which VPN configuration would adapt to changes when deployed to the future site?

11. What are two benefits of nested device groups in Panorama? (Choose two.)

12. A customer has an application that is being identified as unknown-tep for one of their custom PostgreSQL database connections.

Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)

13. How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

14. Which method will dynamically register tags on the Palo Alto Networks NGFW?

15. Which two virtualization platforms officially support the deployment of Palo Alto Networks VM-Series firewalls? (Choose two.)

16. A web server is hosted in the DMZ, and the server is configured to listen for incoming connections only on TCP port 8080. A Security policy rule allowing access from the Trust zone to the DMZ zone need to be configured to enable we browsing access to the server.

Which application and service need to be configured to allow only cleartext web-browsing traffic to thins server on tcp/8080?

17. A customer wants to set up a VLAN interface for a Layer 2 Ethernet port.
Which two mandatory options are used to configure a VL1N interface? (Choose two.)

18. An administrator needs to implement an NGFW between their DMZ and Core network. EIGRP Routing between the two environments is required.

Which interface type would support this business requirement?

19. An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair.

Which NGFW receives the configuration from Panorama?

20. A Security policy rule is configured with a Vulnerability Protection Profile and an action of “Deny”.
Which action will this cause configuration on the matched traffic?