QUESTION 43
What can be applied to prevent users from unknowingly downloading malicious file types from the internet?

QUESTION 44
WildFire can discover zero-day malware in which three types of traffic? (Choose three)

QUESTION 45
Which three categories are identified as best practices in the Best Practice Assessment tool? (Choose three.)

QUESTION 46
Which two components must be configured within User-ID on a new firewall that has been implemented? (Choose two.)

QUESTION 47
Which option is required to Activate/Retrieve a Device Management License on the M-100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?

QUESTION 48
A customer is looking for an analytics tool that uses the logs on the firewall to detect actionable events on the network. They require something to automatically process a series of related threat events that, when combined, indicate a likely compromised host on their network or some other higher level conclusion. They need to pinpoint the area of risk, such as compromised hosts on the network, allows you to assess the risk and take action to prevent exploitation of network resources.
Which feature of PAN-OS can you talk about to address their requirement to optimize their business outcomes?

QUESTION 49
Which four actions can be configured in an Anti-Spyware profile to address command-and-control traffic from compromised hosts? (Choose four.)

QUESTION 50
Which statement best describes the business value of Palo Alto Networks Zero Touch Provisioning (ZTP)?

QUESTION 51
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

QUESTION 52
What are three considerations when deploying User-ID? (Choose three.)

QUESTION 53
When log sizing is factored for the Cortex Data Lake on the NGFW, what is the average log size used in calculation?

QUESTION 54
What are three possible verdicts that WildFire can provide for an analyzed sample? (Choose three)

QUESTION 55
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

QUESTION 56
How often are the databases for Anti-virus. Application, Threats, and WildFire subscription updated?

QUESTION 57
In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

QUESTION 58
Which Palo Alto Networks security component should an administrator use to and NGFW policies to remote users?

QUESTION 59
Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)

QUESTION 60
What filtering criteria is used to determine what users to include as members of a dynamic user group?

QUESTION 61
Which four steps of the cyberattack lifecycle dose the Palo Alto Networks platform present?
(Choose four)

QUESTION 62
Which three platform components can identify and protect against malicious email links? (Choose three.)

QUESTION 63
Which is the smallest Panorama solution that can be used to manage up to 2500 Palo Alto Networks Next Generation firewalls?

QUESTION 64
Given the following network diagram, an administrator is considering the use of Windows Log Forwarding and Global Catalog servers for User-ID implementation. What are two potential bandwidth and processing bottlenecks to consider? (Choose two.)

QUESTION 65
Which of the following statements is valid with regard to Domain Name System (DNS) sinkholing?

QUESTION 66
An administrator needs a PDF summary report that contains information compiled from existing reports based on data for the top 5 in each category.
How often will the Administrator receive the report?

QUESTION 67
A customer has business-critical applications that rely on the general web-browsing application.
Which security profile can help prevent drive-by-downloads while still allowing web-browsing traffic?