Question 1

A network security engineer is going to enable Zone Protection on several security zones How can the engineer ensure that Zone Protection events appear in the firewall's logs?

ASelect the check box 'Log packet-based attack events' in the Zone Protection profile

BNo action is needed Zone Protection events appear in the threat logs by default

CSelect the check box 'Log Zone Protection events' in the Content-ID settings of the firewall

DAccess the CLI in each firewall and enter the command set system setting additional-threat-log on

Answer : A

Question 2

A firewall engineer is managing a Palo Alto Networks NGFW that does not have the DHCP server on DHCP agent configuration. Which interface mode can the broadcast DHCP traffic?

AVirtual ware

BTap

CLayer 2

DLayer 3

Answer : B

Question 3

What does SSL decryption require to establish a firewall as a trusted third party and to establish trust between a client and server to secure an SSL/TLS connection'?

Acertificates

Bprofiles

Clink state

Dstateful firewall connection

Answer : A

Question 4

A firewall engineer supports a mission-critical network that has zero tolerance for application downtime. A best-practice action taken by the engineer is configure an applications and Threats update schedule with a new App-ID threshold of 48 hours. Which two additional best-practice guideline actions should be taken with regard to dynamic updates? (Choose two.)

ACreate a Security policy rule with an application filter to always allow certain categories of new App-IDs.

BClick 'Review Apps' after application updates are installed in order to assess how the changes might impact Security policy.

CSelect the action 'download-only' when configuring an Applications and Threats update schedule.

DConfigure an Applications and Threats update schedule with a threshold of 24 to 48 hours

Answer : B, C

Question 5

A security team has enabled real-time WildFire signature lookup on all its firewalls. Which additional action will further reduce the likelihood of newly discovered malware being allowed through the firewalls?

Aincrease the frequency of the applications and threats dynamic updates.

BIncrease the frequency of the antivirus dynamic updates

CEnable the 'Hold Mode' option in Objects > Security Profiles > Antivirus.

DEnable the 'Report Grayware Files' option in Device > Setup > WildFire.