QUESTION 101
Which statement is true about Deviating Devices and metrics?

QUESTION 102
An endpoint, inside an organization, is infected with known malware that attempts to make a command-and-control connection to a C2 server via the destination IP address Which mechanism prevents this connection from succeeding?

QUESTION 103
What is the default behavior in PAN-OS when a 12 MB portable executable (PE) fe is forwarded to the WildFire cloud service?

QUESTION 104
An Administrator needs a PDF summary report that contains information compiled from existing reports based on data for the Top five(5) in each category.
Which two timeframe options are available to send this report? (Choose two.)

QUESTION 105
Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

QUESTION 106
A price-sensitive customer wants to prevent attacks on a Windows Virtual Server. The server will max out at 100Mbps but needs to have 45.000 sessions to connect to multiple hosts within a data center Which VM instance should be used to secure the network by this customer?

QUESTION 107
An SE is preparing an SLR report for a school and wants to emphasize URL filtering capabilities because the school is concerned that its students are accessing inappropriate websites.
The URL categories being chosen by default in the report are not highlighting these types of websites.
How should the SE show the customer the firewall can detect that these websites are being accessed?

QUESTION 108
A prospective customer wants to purchase a next-generation firewall (NGFW) and requires at least 2 million concurrent sessions with a minimum of 10Gbps of throughput with threat detection enabled.
Which tool will help quickly determine the correct size of NGFW for this customer?

QUESTION 109
When the Cortex Data Lake is sized for Prisma Access mobile users, what is a valid log size range you would use per day. per user?

QUESTION 110
What are three considerations when deploying User-ID? (Choose three.)

QUESTION 111
Which are the three mandatory components needed to run Cortex XDR? (Choose three.)

QUESTION 112
The ability to prevent users from resolving internet protocol (IP) addresses to malicious, grayware, or newly registered domains is provided by which Security service?

QUESTION 113
Palo Alto Networks publishes updated Command-and-Control signatures. How frequently should the related signatures schedule be set?

QUESTION 114
Which three components are specific to the Query Builder found in the Custom Report creation dialog of the firewall? (Choose three.)

QUESTION 115
The WildFire Inline Machine Learning is configured using which Content-ID profiles?

QUESTION 116
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)

QUESTION 117
Which two steps are required to configure the Decryption Broker? (Choose two.)

QUESTION 118
A customer is designing a private data center to host their new web application along with a separate headquarters for users.
Which cloud-delivered security service (CDSS) would be recommended for the headquarters only?

QUESTION 119
Which three settings must be configured to enable Credential Phishing Prevention? (Choose three.)

QUESTION 120
Which three items contain information about Command and Control (C&C) hosts? (Choose three.)

QUESTION 121
What are two ways to manually add and remove members of dynamic user groups (DUGs)? (Choose two)

QUESTION 122
Which Palo Alto Networks security component should an administrator use to and NGFW policies to remote users?

QUESTION 123
There are different Master Keys on Panorama and managed firewalls.
What is the result if a Panorama Administrator pushes configuration to managed firewalls?

QUESTION 124
Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)

B)

C)

D)

QUESTION 125
A customer is concerned about malicious activity occurring directly on their endpoints and not visible to their firewalls.
Which three actions does Traps execute during a security event beyond ensuring the prevention of this activity? (Choose three.)