An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?
A. The firewall do not use floating IPs in active/active HA.
B. The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.
C. The firewalls will share the same interface IP address, and device 1 will use the floating IP if device 0 fails.
D. Each firewall will have a separate floating IP. and priority will determine which firewall has the primary IP.
If the firewall is configured for credential phishing prevention using the "Domain Credential Filter" method, which login will be detected as credential theft?
A. Using the name user's corporate username and password.
B. First four letters of the username matching any valid corporate username.
C. Matching any valid corporate username.
D. Mapping to the IP address of the logged-in user.
Which two methods can be used to verify firewall connectivity to Autofocus? (Choose two. )
A. Check the WebUl Dashboard Autofocus widget
B. Check for WildFire forwarding logs.
C. Verify AutoFocus is enabled below Device Management tab
D. Verify AutoFocus status using the CLI "test"command.
E. Check the license
An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?
A. WebUI
B. Admin Role
C. Authorization
D. Authentication
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?
A. When Panorama is reverted to an earlier PAN-OS release, variable used in template stacks will be removed authentically.
B. Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or stacks.
C. An administrator must use the Expedition tool to adapt the configuration to the pre-pan-OS 8.1 state.
D. Administrators need to manually update variable characters to those to used in pre-PAN-OS 8.1.
What are two benefits of nested device groups in panorama? (Choose two )
A. overwrites local firewall configuration
B. requires configuration both function and location for every device
C. all device groups inherit setting from the Shared group
D. reuse of the existing Security policy rules and objects
Which method will dynamically register tags on the Palo Alto Networks NGFW?
A. Restful API or the VMware API on the firewall or on the User.-D agent or the ready -only domain controller
B. XML API or the VMware API on the firewall on the User-ID agent or the CLI
C. Restful API or the VMware API on the firewall or on the User-ID Agent
D. XML- API or lite VM Monitoring agent on the NGFW or on the User- ID agent
An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall.
Which priority is collect tot the passive firewall?
A. 0
B. 1
C. 90
D. 255
Which DoS protection mechanism detects and prevents session exhaustion attacks?
A. TCP Port Scan Protection
B. Flood Protection
C. Resource Protection
D. Pocket Based Attack Protection
A network security engineer is asked to provide a report on bandwidth usage. Which tab in the ACC provides the information needed to create the report?
A. Blocked Activity
B. Bandwidth Activity
C. Threat Activity
D. Network Activity