NO.157 Employees are shown an application block page when they try to access YouTube. Which security policy is blocking the YouTube application?

NO.158 How often does WildFire release dynamic updates?

NO.159 Which type firewall configuration contains in-progress configuration changes?

NO.160 Which statement best describes the use of Policy Optimizer?

NO.161 Based on the security policy rules shown, ssh will be allowed on which port?

NO.162 Order the steps needed to create a new security zone with a Palo Alto Networks firewall.

NO.163 How often does WildFire release dynamic updates?

NO.164 Match the network device with the correct User-ID technology.

NO.165 At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

NO.166 What is the main function of the Test Policy Match function?

NO.167 A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

NO.168 Which two configuration settings shown are not the default? (Choose two.)

NO.169 Which type of administrative role must you assign to a firewall administrator account, if the account must include a custom set of firewall permissions?

NO.170 You receive notification about a new malware that infects hosts. An infection results in the infected host attempting to contact a command-and-control server.
Which Security Profile detects and prevents this threat from establishing a command-and-control connection?

NO.171 For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

NO.172 Place the following steps in the packet processing order of operations from first to last.

NO.173 A company moved its old port-based firewall to a new Palo Alto Networks NGFW 60 days ago. Which utility should the company use to identify out-of-date or unused rules on the firewall?

NO.174 Which action related to App-ID updates will enable a security administrator to view the existing security policy rule that matches new application signatures?

NO.175 A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID as SuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

NO.176 Based on the graphic which statement accurately describes the output shown in the server monitoring panel?

NO.177 Which type of security rule will match traffic between the Inside zone and Outside zone, within the Inside zone, and within the Outside zone?

NO.178 What are three differences between security policies and security profiles? (Choose three.)

NO.179

Given the topology, which zone type should you configure for firewall interface E1/1?