Which statement best describes the use of Policy Optimizer?

1. A. Policy Optimizer can display which Security policies have not been used in the last 90 days
2. B. Policy Optimizer on a VM-50 firewall can display which Layer 7 App-ID Security policies have unused applications
3. C. Policy Optimizer can add or change a Log Forwarding profile for each Secunty policy selected
4. D. Policy Optimizer can be used on a schedule to automatically create a disabled Layer 7 App-ID Security policy for every Layer 4 policy that exists Admins can then manually enable policies they want to keep and delete ones they want to remove

Correct Answer: B

Where within the firewall GUI can all existing tags be viewed?

1. A. Network > Tags
2. B. Monitor > Tags
3. C. Objects > Tags
4. D. Policies > Tags

Correct Answer: C

For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

1. A. TACACS+
2. B. RADIUS
3. C. LDAP
4. D. SAML

Correct Answer: C

Reference:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/authentication/configure-an-authenticationprofile-and-sequence

An administrator wants to create a NAT policy to allow multiple source IP addresses to be translated to the same public IP address. What is the most appropriate NAT policy to achieve this?

1. A. Dynamic IP and Port
2. B. Dynamic IP
3. C. Static IP
4. D. Destination

Correct Answer: A

An administrator would like to determine the default deny action for the application dns- over-https
Which action would yield the information?

1. A. View the application details in beacon paloaltonetworks.com
2. B. Check the action for the Security policy matching that traffic
3. C. Check the action for the decoder in the antivirus profile
4. D. View the application details in Objects > Applications

Correct Answer: D