Based on the security policy rules shown, ssh will be allowed on which port?

1. A. 80
2. B. 53
3. C. 22
4. D. 23

Correct Answer: C

Which administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact and command-and-control (C2) server.
Which security profile components will detect and prevent this threat after the firewall`s signature database has been updated?

1. A. antivirus profile applied to outbound security policies
2. B. data filtering profile applied to inbound security policies
3. C. data filtering profile applied to outbound security policies
4. D. vulnerability profile applied to inbound security policies

Correct Answer: C

Based on the graphic, what is the purpose of the SSL/TLS Service profile configuration option?

1. A. It defines the SSUTLS encryption strength used to protect the management interface.
2. B. It defines the CA certificate used to verify the client's browser.
3. C. It defines the certificate to send to the client's browser from the management interface.
4. D. It defines the firewall's global SSL/TLS timeout values.

Correct Answer: C

What is considered best practice with regards to committing configuration changes?

1. A. Disable the automatic commit feature that prioritizes content database installations before committing
2. B. Validate configuration changes prior to committing
3. C. Wait until all running and pending jobs are finished before committing
4. D. Export configuration after each single configuration change performed

Correct Answer: A

Which path is used to save and load a configuration with a Palo Alto Networks firewall?

1. A. Device>Setup>Services
2. B. Device>Setup>Management
3. C. Device>Setup>Operations
4. D. Device>Setup>Interfaces

Correct Answer: C