Which Palo Alto Networks firewall security platform provides network security for mobile endpoints by inspecting traffic deployed as internet gateways?

1. A. GlobalProtect
2. B. AutoFocus
3. C. Aperture
4. D. Panorama

Correct Answer: A
GlobalProtect: GlobalProtect safeguards your mobile workforce by inspecting all traffic using your next-generation firewalls deployed as internet gateways, whether at the perimeter, in the Demilitarized Zone (DMZ), or in the cloud.

Which statement is true about Panorama managed devices?

1. A. Panorama automatically removes local configuration locks after a commit from Panorama
2. B. Local configuration locks prohibit Security policy changes for a Panorama managed device
3. C. Security policy rules configured on local firewalls always take precedence
4. D. Local configuration locks can be manually unlocked from Panorama

Correct Answer: D
Explanation Explanation/Reference: Reference:
https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/administer- panorama/manage- locks-forrestricting-configuration-changes.html

DRAG DROP
Match the network device with the correct User-ID technology.

Answer:

Solution:
Microsoft Exchange – Server monitoring
Linux authentication – syslog monitoring
Windows Client – client probing
Citrix client – Terminal Services agent


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

Selecting the option to revert firewall changes will replace what settings?
Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

The CFO found a malware infected USB drive in the parking lot, which when inserted infected their corporate laptop the malware contacted a known command-and-control server which exfiltrating corporate data.
Which Security profile feature could have been used to prevent the communications with the command-and-control server?

1. A. Create a Data Filtering Profile and enable its DNS sinkhole feature.
2. B. Create an Antivirus Profile and enable its DNS sinkhole feature.
3. C. Create an Anti-Spyware Profile and enable its DNS sinkhole feature.
4. D. Create a URL Filtering Profile and block the DNS sinkhole URL category.

Correct Answer: C