Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two.)

1. A. QoS profile
2. B. DoS Protection profile
3. C. Zone Protection profile
4. D. DoS Protection policy

Correct Answer: BC

Reference:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles

The NetSec Manager asked to create a new firewall Local Administrator profile with customized privileges named NewAdmin. This new administrator has to authenticate without inserting any username or password to access the WebUI.
What steps should the administrator follow to create the New_Admin Administrator profile?
A.
* 1. Select the "Use only client certificate authentication" check box.
* 2. Set Role to Role Based.
* 3. Issue to the Client a Certificate with Common Name = NewAdmin
B.
* 1. Select the "Use only client certificate authentication" check box.
* 2. Set Role to Dynamic.
* 3. Issue to the Client a Certificate with Certificate Name = NewAdmin
C.
* 1. Set the Authentication profile to Local.
* 2. Select the "Use only client certificate authentication" check box.
* 3. Set Role to Role Based.
D.
* 1. Select the "Use only client certificate authentication" check box.
* 2. Set Role to Dynamic.
* 3. Issue to the Client a Certificate with Common Name = New Admin

1. A.

Correct Answer: B

An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated? (Choose two.)

1. A. vulnerability protection profile applied to outbound security policies
2. B. anti-spyware profile applied to outbound security policies
3. C. antivirus profile applied to outbound security policies
4. D. URL filtering profile applied to outbound security policies

Correct Answer: BD

An administrator configured a Security policy rule with an Antivirus Security profile. The administrator did not change the action (or the profile. If a virus gets detected, how wilt the firewall handle the traffic?

1. A. It allows the traffic because the profile was not set to explicitly deny the traffic.
2. B. It drops the traffic because the profile was not set to explicitly allow the traffic.
3. C. It uses the default action assigned to the virus signature.
4. D. It allows the traffic but generates an entry in the Threat logs.

Correct Answer: B

How frequently can wildfire updates be made available to firewalls?

1. A. every 15 minutes
2. B. every 30 minutes
3. C. every 60 minutes
4. D. every 5 minutes

Correct Answer: D