A network has 10 domain controllers, multiple WAN links, and a network infrastructure with bandwidth needed to support mission-critical applications. Given the scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

1. A. Windows-based agent on a domain controller
2. B. Captive Portal
3. C. Citrix terminal server with adequate data-plane resources
4. D. PAN-OS integrated agent

Correct Answer: A

When creating a Panorama administrator type of Device Group and Template Admin, which two things must you create first? (Choose two.)

1. A. password profile
2. B. access domain
3. C. admin rote
4. D. server profile

Correct Answer: CD

What are three valid information sources that can be used when tagging users to dynamic user groups? (Choose three.)

1. A. Blometric scanning results from iOS devices
2. B. Firewall logs
3. C. Custom API scripts
4. D. Security Information and Event Management Systems (SIEMS), such as Splun
5. E. DNS Security service

Correct Answer: BCE

At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

1. A. delivery
2. B. command and control
3. C. explotation
4. D. reinsurance
5. E. installation

Correct Answer: A

Choose the option that correctly completes this statement. A Security Profile can block or allow traffic
________ .

1. A. on either the data place or the management plane.
2. B. after it is matched by a security policy rule that allows traffic.
3. C. before it is matched to a Security policy rule.
4. D. after it is matched by a security policy rule that allows or blocks traffic.

Correct Answer: B