An administrator wants to create a No-NAT rule to exempt a flow from the default NAT rule. What is the best way to do this?

1. A. Create a Security policy rule to allow the traffic.
2. B. Create a new NAT rule with the correct parameters and leave the translation type as None
3. C. Create a static NAT rule with an application override.
4. D. Create a static NAT rule translating to the destination interface.

Correct Answer: B

An internal host wants to connect to servers of the internet through using source NAT. Which policy is required to enable source NAT on the firewall?

1. A. NAT policy with source zone and destination zone specified
2. B. post-NAT policy with external source and any destination address
3. C. NAT policy with no source of destination zone selected
4. D. pre-NAT policy with external source and any destination address

Correct Answer: A

Which feature would be useful for preventing traffic from hosting providers that place few restrictions on content, whose services are frequently used by attackers to distribute illegal or unethical material?

1. A. Palo Alto Networks Bulletproof IP Addresses
2. B. Palo Alto Networks C&C IP Addresses
3. C. Palo Alto Networks Known Malicious IP Addresses
4. D. Palo Alto Networks High-Risk IP Addresses

Correct Answer: A
To block hosts that use bulletproof hosts to provide malicious, illegal, and/or unethical content, use the bulletproof IP address list in policy.
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/content-inspection-features/edl-for-bulletproof- isps#:~:text=A%20new%20built%2Din%20external,%2C%20illegal%2C%20and%20unethi cal%20content.

Identify the correct order to configure the PAN-OS integrated USER-ID agent.
* 3. add the service account to monitor the server(s)
* 2. define the address of the servers to be monitored on the firewall
* 4. commit the configuration, and verify agent connection status
* 1. create a service account on the Domain Controller with sufficient permissions to execute the User- ID agent

1. A. 2-3-4-1
2. B. 1-4-3-2
3. C. 3-1-2-4
4. D. 1-3-2-4

Correct Answer: D

An administrator is trying to enforce policy on some (but not all) of the entries in an external dynamic list. What is the maximum number of entries that they can be exclude?

1. A. 50
2. B. 100
3. C. 200
4. D. 1,000

Correct Answer: B