Which two security profile types can be attached to a security policy? (Choose two.)

1. A. antivirus
2. B. DDoS protection
3. C. threat
4. D. vulnerability

Correct Answer: AD

An administrator wants to prevent access to media content websites that are risky
Which two URL categories should be combined in a custom URL category to accomplish this goal? (Choose two)

1. A. streaming-media
2. B. high-risk
3. C. recreation-and-hobbies
4. D. known-risk

Correct Answer: AC

Starting with PAN_OS version 9.1 which new type of object is supported for use within the user field of a security policy rule?

1. A. local username
2. B. dynamic user group
3. C. remote username
4. D. static user group

Correct Answer: B

The PowerBall Lottery has reached an unusually high value this week. Your company has decided to raise morale by allowing employees to access the PowerBall Lottery website (www.powerball.com) for just this week. However, the company does not want employees to access any other websites also listed in the URL filtering “gambling” category.
Which method allows the employees to access the PowerBall Lottery website but without unblocking access to the “gambling” URL category?

1. A. Add just the URL www.powerball.com to a Security policy allow rule.
2. B. Manually remove powerball.com from the gambling URL category.
3. C. Add *.powerball.com to the URL Filtering allow list.
4. D. Create a custom URL category, add *.powerball.com to it and allow it in the Security Profile.

Correct Answer: CD

Which built-in IP address EDL would be useful for preventing traffic from IP addresses that are verified as unsafe based on WildFire analysis Unit 42 research and data gathered from telemetry?

1. A. Palo Alto Networks C&C IP Addresses
2. B. Palo Alto Networks Bulletproof IP Addresses
3. C. Palo Alto Networks High-Risk IP Addresses
4. D. Palo Alto Networks Known Malicious IP Addresses

Correct Answer: D
Palo Alto Networks Known Malicious IP Addresses
—Contains IP addresses that are verified malicious based on WildFire analysis, Unit 42 research, and data gathered from telemetry (Share ThreatIntelligence with Palo Alto Networks). Attackers use these IP addresses almost exclusively to distribute malware, initiate command-and-control activity, and launch attacks.
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/built-