Palo Alto Test(questions and answers)

A Security policy rule displayed in italic font indicates which condition? The rule is active. The rule is disabled. The rule is a clone. The rule has been overridden. The rule is disabled. An Interface Management Profile can be attached to which two interface types? (Choose two.) Loopback Virtual Wire Layer 3 Tap Layer 2 ... 00:05 01:10 App-ID running on a firewall identifies applications using which three methods? (Choose three.) Application signatures Known protocol decoders Program heuristics PAN-DB lookups WildFire lookups ... Application block pages can be enabled for which applications? MGT port-based non-TCP/IP any web-based web-based Because a firewall examines every packet in a session, a firewall can detect application ________? shifts groups errors filters XXXXXXXXXXXXXXXXXX ... For which firewall feature should you create forward trust and forward untrust certificates? SSH decryption SSL client-side certificate checking SSL forward proxy decryption SSL Inbound Inspection decryption XXXXXXXXXXXXXXXX ... If a DNS sinkhole is configured, any sinkhole actions indicating a potentially infected host are recorded in which log type? Traffic WildFire Submissions Threat Data Filtering XXXXXXXXXXXXXXXXXX ... If there is an HA configuration mismatch between firewalls during peer negotiation, which state will the passive firewall enter? INITIAL NON-FUNCTIONAL ACTIVE PASSIVE NON-FUNCTIONAL In a destination NAT configuration, which option accurately completes the following sentence? A Security policy rule should be written to match the _______. post-NAT source and destination addresses, and the post-NAT destination zone post-NAT source and destination addresses, but the pre-NAT destination zone original pre-NAT source and destination addresses, and the pre-NAT destination zone original pre-NAT source and destination addresses, but the post-NAT destination zone original pre-NAT source and destination addresses, but the post-NAT destination zone In an HA configuration, which three components are synchronized between the pair of firewalls? (Choose three.) objects logs policies networks objects policies networks