Question 1

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

AThird-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance

BPalo Alto Networks AutoFocus generated Correlation Objects

CPalo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles

DWF-500 configured as private clouds for privacy concerns

EPalo Alto Networks non-firewall products, like Traps and Aperture
https://www.paloaltonetworks.com/products/secure-the-network/subscriptions/autofocus

Answer : A, B, E

Question 2

Which license is required to receive weekly dynamic updates to the correlation objects on the firewall and Panorama?

AWildFire on the firewall, and AutoFocus on Panorama

BURL Filtering on the firewall, and MindMeld on Panorama

CThreat Prevention on the firewall, and Support on Panorama

DGlobalProtect on the firewall, and Threat Prevention on Panorama

Answer : C

Question 3

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer's requirements? (Choose two.)

AVirtual systems

BHA active/active

CPolicy-based forwarding

DHA active/passive
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/route-based-redundancy

Answer : B, C

Question 4

Which two designs require virtual systems? (Choose two.)

AA shared gateway interface that does not need a full administrative boundary

BA virtual router as a replacement for an internet-facing router

CA single physical firewall shared by different organizations, each with unique traffic control needs

DA VMware NSX deployment that needs micros segmentation

Answer : B, C

Question 5

A network covers three geographical areas: Americas, Europe (EMEA), and Asia (APAC). The APAC segment of the network consists of nine HA pairs of PA-3060 firewalls, generating a combined log output of 25 K logs per second. Only 14 days of traffic log retention is required.

Which management and logging solution will be effective and cost-efficient for this segment of the network?

ATwo M-500s in HA management at the global level, with one M-100 with 4 TB of storage for APAC

BTwo M-500s in HA management at the global level, and one log collector-mode M-500 with 8 TB of storage for APAC

CTwo M-500s in HA management at the global level, and two log collector-mode M-500s in a log collector group with 16 TB of storage for APAC

DTwo Dual-mode M-500s in HA for both global management and storage. Each M-500 has 8 TB of storage