A traffic log might list an application as "not-applicable" for which two reasons'? (Choose two )

• A.The firewall dropped a TCP SYN packet
• B.The TCP connection terminated without identifying any application data
• C.There was not enough application data after the TCP connection was established
• D.0The firewall did not install the session

Comment: *

Name: *

Email: *

Verification: *

How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

• A.Use the debug dataplane packet-diag set capture stage firewall file command.
• B.Enable all four stages of traffic capture (TX, RX, DROP, Firewall).
• C.Use the debug dataplane packet-diag set capture stage management file command.
• D.Use the tcpdump command.

Comment: *

Name: *

Email: *

Verification: *

The firewall is not downloading IP addresses from MineMeld. Based, on the image, what most likely is wrong?

• A.A Certificate Profile that contains the client certificate needs to be selected.
• B.The source address supports only files hosted with an ftp://<address/file>.
• C.External Dynamic Lists do not support SSL connections.
• D.A Certificate Profile that contains the CA certificate needs to be selected.

Comment: *

Name: *

Email: *

Verification: *

An engineer needs to permit XML API access to a firewall for automation on a network segment that is routed through a Layer 3 subinterface on a Palo Alto Networks firewall. However this network segment cannot access the dedicated management interface due to the Security policy Without changing the existing access to the management interface how can the engineer fulfill this request?

• A.Configure a service route for HTTP to use the subinterface
• B.Enable HTTPS in an Interface Management profile on the subinterface
• C.Specify the subinterface as a management interface in Setup > Device > Interfaces
• D.Add the network segment's IP range to the Permitted IP Addresses list

Comment: *

Name: *

Email: *

Verification: *

An existing NGFW customer requires direct interne! access offload locally at each site and iPSec connectivity to all branches over public internet. One requirement is mat no new SD-WAN hardware be introduced to the environment.
What is the best solution for the customer?

• A.Deploy Prisma SD-WAN with Prisma Access
• B.Configure a remote network on PAN-OS
• C.Configure policy-based forwarding
• D.Upgrade to a PAN-OS SD-WAN subscription

Comment: *

Name: *

Email: *

Verification: *