UPDATED ACTUAL QUESTIONS AND
CORRECT ANSWERS
Which action can help alleviate a prospective customer's concerns about transitioning from a
legacy firewall with port-based policies to a Palo Alto Networks NGFW with application-
based policies?
A. Discuss the PAN-OS Policy Optimizer feature as a means to safely migrate port-based
rules to application-based rules.
B. Assure the customer that the migration wizard will automatically convert port-based rules
to application-based rules upon installation of the new NGFW.
C. Recommend deploying a new NGFW firewall alongside the customer's existing port-based
firewall until they are comfortable removing the port-based firewall.
D. Reassure the customer that the NGFW supports the continued use of port-based rules, as
PAN-OS automatically translates these policies into application-based policies. - CORRECT
ANSWER Answer: A
What are the first two steps a customer should perform as they begin to understand and adopt
Zero Trust principles? (Choose two)
A. Understand which users, devices, infrastructure, applications, data, and services are part of
the network or have access to it.
B. Enable relevant Cloud-Delivered Security Services (CDSS) subscriptions to automatically
protect the customer's environment from both internal and external threats.
C. Map the transactions between users, applications, and data, then verify and inspect those
transactions.
D. Implement VM-Series NGFWs in the customer's public and private clouds to protect east-
west traffic. - CORRECT ANSWER Answer: A, C
Which two products can be integrated and managed by Strata Cloud Manager (SCM)?
(Choose two)
A. Prisma SD-WAN
B. Prisma Cloud
C. Cortex XDR