During the App-ID update process, what should you click on to confirm whether an existing policy rule is affected by an App-ID update?

1. A. check now
2. B. review policies
3. C. test policy match
4. D. download

Correct Answer: B

An administrator is troubleshooting traffic that should match the interzone-default rule. However, the administrator doesn't see this traffic in the traffic logs on the firewall. The interzone-default was never changed from its default configuration.
Why doesn't the administrator see the traffic?

1. A. Traffic is being denied on the interzone-default policy.
2. B. The Log Forwarding profile is not configured on the policy.
3. C. The interzone-default policy is disabled by default
4. D. Logging on the interzone-default policy is disabled

Correct Answer: D

Palo Alto Networks firewall architecture accelerates content map minimizing latency using which two components'? (Choose two )

1. A. Network Processing Engine
2. B. Single Stream-based Engine
3. C. Policy Engine
4. D. Parallel Processing Hardware

Correct Answer: B

Which three statement describe the operation of Security Policy rules or Security Profiles? (Choose three)

1. A. Security policy rules inspect but do not block traffic.
2. B. Security Profile should be used only on allowed traffic.
3. C. Security Profile are attached to security policy rules.
4. D. Security Policy rules are attached to Security Profiles.
5. E. Security Policy rules can block or allow traffic.

Correct Answer: BCE

Which type of address object is www.paloaltonetworks.com?

1. A. IP range
2. B. IP netmask
3. C. named address
4. D. FQDN

Correct Answer: D