An administrator would like to see the traffic that matches the interzone-default rule in the traffic logs. What is the correct process to enable this logging1?

1. A. Select the interzone-default rule and edit the rule on the Actions tab select Log at Session Start and click OK
2. B. Select the interzone-default rule and edit the rule on the Actions tab select Log at Session End and click OK
3. C. This rule has traffic logging enabled by default no further action is required
4. D. Select the interzone-default rule and click Override on the Actions tab select Log at Session End and click OK

Correct Answer: D

Which two statements are correct about App-ID content updates? (Choose two.)

1. A. Updated application content may change how security policy rules are enforced
2. B. After an application content update, new applications must be manually classified prior to use
3. C. Existing security policy rules are not affected by application content updates
4. D. After an application content update, new applications are automatically identified and classified

Correct Answer: AD

When creating a custom URL category object, which is a valid type?

1. A. domain match
2. B. host names
3. C. wildcard
4. D. category match

Correct Answer: D

Which Palo Alto network security operating platform component provides consolidated policy creation and centralized management?

1. A. Prisma SaaS
2. B. Panorama
3. C. AutoFocus
4. D. GlobalProtect

Correct Answer: B

After making multiple changes to the candidate configuration of a firewall, the administrator would like to start over with a candidate configuration that matches the running configuration.
Which command in Device > Setup > Operations would provide the most operationally efficient way to accomplish this?

1. A. Import named config snapshot
2. B. Load named configuration snapshot
3. C. Revert to running configuration
4. D. Revert to last saved configuration

Correct Answer: C