A customer is adopting Microsoft Office 365 but is concerned about the potential security exposure that such a move could mean. The security analyst suggests using Aperture and the Palo Alto Network firewall together to provide data and network security.

What are the two reasons this solution has been suggested? (Choose two.)

A. The firewall secures data in transit between the network and the cloud.

B. Aperture prevents users from using non-sanctioned SaaS applications.

C. The firewall scans data that resides in the cloud for malware.

D. Aperture scans data that resides in the cloud for sensitive information.

A specific URL keeps appearing in URL filtering log entries, it was blocked successfully, but the administrator would like to investigate further.

In which two ways would AutoFocus help this administrator? (Choose two.)

A. Generate a list of IP addresses for use in Dynamic Address Groups on the firewall

B. Identify malicious files associated with this URL

C. Generate a correlation object that can be used to monitor associated activities

D. Identify malware campaigns associated with this URL

What are three considerations when deploying User-ID. (Choose three.)

A. Enable WMI probing in high security networks

B. User-ID can support a maximum hops.

C. Specify included and excluded networks when configuring User-ID

D. Use a dedicated service account for User-ID services with the minimal permissions necessary.

E. Only enable User-ID on trusted zones

Given the following network diagram, an administrator is considering the use of Windows Log Forwarding and Global Catalog servers for User-ID implementation.

What are two potential bandwidth and processing bottlenecks to consider? (Choose two.)

A. Member Servers

B. Firewall

C. Domain Controllers

D. Windows Server

XYZ Corporation has a legacy environment with asymmetric routing. The customer understands that Palo Alto Networks firewalls can support asymmetric routing with redundancy.

Which two features must be enabled to meet the customer's requirements? (Choose two.)

A. Virtual systems

B. HA active/active

C. Policy-based forwarding

D. HA active/passive

How often are regularly scheduled update for the Anti-virus Application, Threats, and Wildfire subscription databases made available by Palo Alto Networks in PAN-OS 8.0?

A. Anti-Virus (Daily) Application (Weekly), Threats (Daily), Wildfire (5 Minutes)

B. Anti-Virus (Weekly) Application (Daily), Threats (Daily), Wildfire (5 Minutes)

C. Anti-Virus (Daily) Application (Weekly), Threats (Weekly), Wildfire (5 Minutes)

D. Anti-Virus (Weekly) Application (Daily), Threats (Weekly), Wildfire (5 Minutes)

What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)

A. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.

B. It can bootstrap the virtual firewall for dynamic deployment scenarios

C. It can manage the virtual firewalls' resource use, allowing for VM resource over-subscription.

D. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support

How does SSL Forward Proxy decryption work?

A. SSL Forward Proxy decryption policy decrypts and inspects SSL/TLS traffic from internal users to the web.

B. The SSL Forward Proxy Firewall creates a certificate intended for the client that is intercepted and altered by the firewall.

C. If the server's certificate is signed by a CA that the firewall does not trust, the firewall will use the certificate only on Forward Trust.

D. The firewall resides between the internal client and internal server to intercept traffic between the two.

Which three actions should be taken before deploying a firewall evaluation unit in the customer's environment? (Choose three.)

A. Inform the customer that they will need to provide a SPAN port for the evaluation unit assuming a TAP mode deployment.

B. Request that the customs make port 3978 available to allow the evaluation unit to communicate with Panorama.

C. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed.

D. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.

E. Set expectations around which information will be presented in the Security Lifecycle Review because sensitive information may be made visible.

Which two tabs in Panorama can be used to identify templates to define a common base configuration? (Choose two)

A. Monitor Tab

B. Network Tab

C. Device Tab

D. Objects Tab

E. Policies Tab