Which type of administrator account cannot be used to authenticate user traffic flowing through the firewall’s data plane?

1. A. Kerberos user
2. B. SAML user
3. C. local database user
4. D. local user

Correct Answer: B

Which component is a building block in a Security policy rule?

1. A. decryption profile
2. B. destination interface
3. C. timeout (min)
4. D. application

Correct Answer: D

Reference:
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-web-interface-help/policies/policies-security/buildingblocks-in-a-security-policy-rule.html

An administrator has an IP address range in the external dynamic list and wants to create an exception for one specific IP address in this address range.
Which steps should the administrator take?

1. A. Add the address range to the Manual Exceptions list and exclude the IP address by selecting the entry.
2. B. Add each IP address in the range as a list entry and then exclude the IP address byadding it to the Manual Exceptions list.
3. C. Select the address range in the List Entries lis
4. D. A column will open with the IP addresse
5. E. Select the entry to exclude.
6. F. Add the specific IP address from the address range to the Manual Exceptions list by using regular expressions to define the entry.

Correct Answer: D

If users from the Trusted zone need to allow traffic to an SFTP server in the DMZ zone, how should a Security policy with App-ID be configured?
A)

B)

C)

D)

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: D

Given the screenshot what two types of route is the administrator configuring? (Choose two)

1. A. default route
2. B. OSPF
3. C. BGP
4. D. static route

Correct Answer: A