Q26. An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. How would the administrator establish the chain of trust?

Q27. The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.
Which two options would help the administrator Troubleshoot this issue? (Choose two.)

Q28. An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

Q29. An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)

Q30. Which feature can be configured on VM-Series firewalls’?

Q31. An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22 Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?

A)

B)

C)

D)

Q32. An administrator has enabled OSPF on a virtual router on the NGFW OSPF is not adding new routes to the virtual router.
Which two options enable the administrator top troubleshoot this issue? (Choose two.)

Q33. What are two benefits of nested device groups in panorama? (Choose two )

Q34. Which User-ID method should b configured to map addresses to usernames for users connected through a terminal server?

Q35. Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)

Q36. A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

Q37. A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny”.
Which action will this configuration cause on the matched traffic?

Q38. During the packet flow process, which two processes are performed in application identification? (Choose two.)

Q39. A user’s traffic traversing a Palo Alto Networks NGFW sometime can reach http//www company com At the session times out.
The NGFW has been configured with a PBF rule that the user’s traffic matches when it goes to http //www company com.
How con the firewall be configured to automatically disable the PBF rule if the next hop goes down?

Q40. Which feature prevents the submission of login information into website froms?

Q41. Which three authentication faction factors does PAN-OS software support for MFA? (Choose three.)

Q42. How does Panorama prompt VMware NSX to quarantine an in6erface VM??

Q43. Which Captive Portal mode must be contoured to support MFA authentication?

Q44. In High Availability, which information is transferred via the HA data link?

Q45. VPN traffic intended for an administrator’s Palo Alto Networks NGfW is being maliciously intercepted and retransmitted by the interceptor. When Creating a VPN tunnel, which protection profile cm be enabled to prevent this malicious behavior?

Q46. Which CLI command enables an administrator to view detail about the firewall including uptime. PAN -OS version, and serial number?