السؤال #1

In which two applications can Prisma Access threat logs for mobile user traffic be reviewed? (Choose two.)

A. Prisma Cloud dashboard

B. Strata Cloud Manager (SCM)

C. Strata Logging Service

D. Service connection firewall

عرض الإجابة

اجابة صحيحة: BC

السؤال #2

What is a necessary step for creation of a custom Prisma Access report on Strata Cloud Manager(SCM)?

A. pen a support ticket

B. et up Cloud Identity Engine

C. enerate a PDF summary report

D. onfigure a dashboard

عرض الإجابة

اجابة صحيحة: D

السؤال #3

A cloud security architect is designing a certificate management strategy for Strata Cloud Manager (SCM) across hybrid environments.Which practice ensures optimal security with low management overhead?

A. Implement separate certificate authorities with independent validation rules for each cloud environment

B. Configure manual certificate deployment with quarterly reviews and environment-specific security protocols

C. Use cloud provider default certificates with scheduled synchronization and localized renewal processes

D. Deploy centralized certificate automation with standardized protocols and continuous monitoring

عرض الإجابة

اجابة صحيحة: D

السؤال #4

How many places will a firewall administrator need to create and configure a custom data lossprevention (DLP) profile across Prisma Access and the NGFW?

A. ne

B. wo

C. hree

D. our

عرض الإجابة

اجابة صحيحة: A

السؤال #5

Which method in the WildFire analysis report detonates unknown submissions to provide visibility into real-world effects and behavior?

A. Dynamic analysis

B. Static analysis

C. Intelligent Run-time Memory Analysis

D. Machine learning (ML)

عرض الإجابة

اجابة صحيحة: A

السؤال #6

In which two applications can Prisma Access threat logs for mobile user traffic be reviewed? (Choose two.)

A. Prisma Cloud dashboard

B. Strata Cloud Manager (SCM)

C. Strata Logging Service

D. Service connection firewall

عرض الإجابة

اجابة صحيحة: BC

السؤال #7

Which method in the WildFire analysis report detonates unknown submissions to provide visibilityinto real-world effects and behavior?

A. ynamic analysis

B. tatic analysis

C. ntelligent Run-time Memory Analysis

D. achine learning (ML)

عرض الإجابة

اجابة صحيحة: A

السؤال #8

An NGFW administrator is updating PAN-OS on company data center firewalls managed by Panoram

A. Prior to installing the update, what must the administrator verify to ensure the devices will continue to be supported by Panorama?

B. Device telemetry is enabled

C. Panorama is configured as the primary device in the log collecting group for the data center firewalls

D. All devices are in the same template stack

E. Panorama is running the same or newer PAN-OS release as the one being installed

عرض الإجابة

اجابة صحيحة: D

السؤال #9

A network administrator obtains Palo Alto Networks Advanced Threat Prevention and Advanced DNS Security subscriptions for edge NGFWs and is setting up security profiles. Which step should be included in the initial configuration of the Advanced DNS Security service?

A. reate overrides for all company owned FQDNs

B. reate a decryption policy rule to decrypt DNS-over-TLS / port 853 traffic

C. onfigure DNS Security signature policy settings to sinkhole malicious DNS queries

D. nable Advanced Threat Prevention with default settings and only focus on high-risk traffic

عرض الإجابة

اجابة صحيحة: C

السؤال #10

An NGFW administrator is updating PAN-OS on company data center firewalls managed by Panoram

A. Prior to installing the update, what must the administrator verify to ensure the devices will continue to be supported by Panorama?

B. Device telemetry is enabled

C. Panorama is configured as the primary device in the log collecting group for the data center firewalls

D. All devices are in the same template stack

E. Panorama is running the same or newer PAN-OS release as the one being installed

عرض الإجابة

اجابة صحيحة: D

السؤال #11

In which two applications can Prisma Access threat logs for mobile user traffic be reviewed? (Choose two.)

A. Prisma Cloud dashboard

B. Strata Cloud Manager (SCM)

C. Strata Logging Service

D. Service connection firewall

عرض الإجابة

اجابة صحيحة: BC

السؤال #12

Which two tools can be used to configure Cloud NGFWs for AWS? (Choose two.)

A. risma Cloud management console

B. ortex XSIAM

C. loud service provider (CSP) management console

D. anorama

عرض الإجابة

اجابة صحيحة: CD

السؤال #13

Which procedure is most effective for maintaining continuity and security during a Prisma Access data plane software upgrade?

A. Back up configurations, schedule upgrades during off-peak hours, and use a phased approach rather than attempting a network-wide rollout

B. Use Strata Cloud Manager (SCM) to perform dynamic upgrades automatically and simultaneously across all locations at once to ensure network-wide uniformity

C. Disable all security features during the upgrade to prevent conflicts and re-enable them after completion to ensure a smooth rollout process

D. Perform the upgrade during peak business hours, quickly address any user-reported issues, and ensure immediate troubleshooting post-rollout

عرض الإجابة

اجابة صحيحة: A

السؤال #14

Using Prisma Access, which solution provides the most security coverage of network protocols for the mobile workforce?

A. xplicit proxy

B. lient-based VPN

C. lientless VPN

D. nterprise browser

عرض الإجابة

اجابة صحيحة: B

السؤال #15

How does Strata Logging Service help resolve ever-increasing log retention needs for a companyusing Prisma Access?

A. t increases resilience due to decentralized collection and storage of logs

B. utomatic selection of physical data storage regions decreases adoption time

C. t can scale to meet the capacity needs of new locations as business grows

D. og traffic using the licensed bandwidth purchased for Prisma Access reduces overhead

عرض الإجابة

اجابة صحيحة: C

السؤال #16

By default, how often are signatures updated for firewalls with Advanced WildFire?

A. nce a week

B. ithin 5-10 minutes

C. ithin 24-48 hours

D. n real time

عرض الإجابة

اجابة صحيحة: B

السؤال #17

When a firewall acts as an application-level gateway (ALG), what does it require in order to establish a connection?

A. Dynamic IP and Port (DIPP)

B. Payload

C. Session Initiation Protocol (SIP)

D. Pinholes

عرض الإجابة

اجابة صحيحة: B

السؤال #18

Which set of attributes is used by IoT Security to identify and classify appliances on a network when determining Device-ID?

A. AIP address, network traffic patterns, and device type

B. BMAC address, device manufacturer, and operating system

C. CHostname, application usage, and encryption method

D. DDevice model, firmware version, and user credential

عرض الإجابة

اجابة صحيحة: B

السؤال #19

Which functionality does an NGFW use to determine whether new session setups are legitimate or illegitimate?

A. SYN bit

B. SYN cookies

C. Random Early Detection (RED)

D. SYN flood protection

عرض الإجابة

اجابة صحيحة: B

السؤال #20

Which two tools can be used to configure Cloud NGFWs for AWS? (Choose two.)

A. Cortex XSIAM

B. Prisma Cloud management console

C. Panorama

D. Cloud service provider's management console

عرض الإجابة

اجابة صحيحة: CD

السؤال #21

An NGFW administrator is updating PAN-OS on company data center firewalls managed by Panoram

A. Prior to installing the update, what must the administrator verify to ensure the devices will continue to be supported by Panorama?

B. Device telemetry is enabled

C. Panorama is configured as the primary device in the log collecting group for the data center firewalls

D. All devices are in the same template stack

E. Panorama is running the same or newer PAN-OS release as the one being installed

عرض الإجابة

اجابة صحيحة: D

السؤال #22

Using Prisma Access, which solution provides the most security coverage of network protocols for the mobile workforce?

A. Explicit proxy

B. Client-based VPN

C. Enterprise browser

D. Clientless VPN

عرض الإجابة

اجابة صحيحة: B

السؤال #23

When adding a Zero Touch Provisioning (ZTP) firewall to Panorama, when can the firewall be powered on?

A. uring license activation

B. fter activating registration and completing license deployment profile

C. fter all required installation and setup procedures are completed

D. uring installation

عرض الإجابة

اجابة صحيحة: B

السؤال #24

Which step is necessary to ensure an organization is using the inline cloud analysis features in its Advanced Threat Prevention subscription?

A. Disable anti-spyware to avoid performance impacts and rely solely on external threat intelligence

B. Enable SSL decryption in Security policies to inspect and analyze encrypted traffic for threats

C. Update or create a new anti-spyware security profile and enable the appropriate local deep learning models

D. Configure Advanced Threat Prevention profiles with default settings and only focus on high-risk traffic to avoid affecting network performance

عرض الإجابة

اجابة صحيحة: C

السؤال #25

In which two applications can Prisma Access threat logs for mobile user traffic be reviewed? (Choose two.)

A. Prisma Cloud dashboard

B. Strata Cloud Manager (SCM)

C. Strata Logging Service

D. Service connection firewall

عرض الإجابة

اجابة صحيحة: BC

السؤال #26

Which two tools can be used to configure Cloud NGFWs for AWS? (Choose two.)

A. Cortex XSIAM

B. Prisma Cloud management console

C. Panorama

D. Cloud service provider's management console

عرض الإجابة

اجابة صحيحة: CD

السؤال #27

Using Prisma Access, which solution provides the most security coverage of network protocols for the mobile workforce?

A. Explicit proxy

B. Client-based VPN

C. Enterprise browser

D. Clientless VPN

عرض الإجابة

اجابة صحيحة: B

السؤال #28

How does Advanced WildFire integrate into third-party applications?

A. hrough playbooks automatically sending WildFire data

B. hrough customized reporting configured in NGFWs

C. hrough Strata Logging Service

D. hrough the WildFire API

عرض الإجابة

اجابة صحيحة: D

السؤال #29

Which procedure is most effective for maintaining continuity and security during a Prisma Access data plane software upgrade?

A. Back up configurations, schedule upgrades during off-peak hours, and use a phased approach rather than attempting a network-wide rollout

B. Use Strata Cloud Manager (SCM) to perform dynamic upgrades automatically and simultaneously across all locations at once to ensure network-wide uniformity

C. Disable all security features during the upgrade to prevent conflicts and re-enable them after completion to ensure a smooth rollout process

D. Perform the upgrade during peak business hours, quickly address any user-reported issues, and ensure immediate troubleshooting post-rollout

عرض الإجابة

اجابة صحيحة: A

السؤال #30

Which procedure is most effective for maintaining continuity and security during a Prisma Access data plane software upgrade?

A. Back up configurations, schedule upgrades during off-peak hours, and use a phased approach rather than attempting a network-wide rollout

B. Use Strata Cloud Manager (SCM) to perform dynamic upgrades automatically and simultaneously across all locations at once to ensure network-wide uniformity

C. Disable all security features during the upgrade to prevent conflicts and re-enable them after completion to ensure a smooth rollout process

D. Perform the upgrade during peak business hours, quickly address any user-reported issues, and ensure immediate troubleshooting post-rollout

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان