The Palo Alto Networks NGFW was configured with a single virtual router named VR-1 What changes are required on VR-1 to route traffic between two interfaces on the NGFW?

1. A. Add zones attached to interfaces to the virtual router
2. B. Add interfaces to the virtual router
3. C. Enable the redistribution profile to redistribute connected routes
4. D. Add a static routes to route between the two interfaces

Correct Answer: D

Which two rule types allow the administrator to modify the destination zone? (Choose two )

1. A. interzone
2. B. intrazone
3. C. universal
4. D. shadowed

Correct Answer: AC

Which statement is true regarding NAT rules?

1. A. Static NAT rules have precedence over other forms of NAT.
2. B. Translation of the IP address and port occurs before security processing.
3. C. NAT rules are processed in order from top to bottom.
4. D. Firewall supports NAT on Layer 3 interfaces only.

Correct Answer: C
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/networking/nat/nat-policy-rules/nat-policy-overvie

Which statement is true regarding a Best Practice Assessment?

1. A. The BPA tool can be run only on firewalls
2. B. It provides a percentage of adoption for each assessment data
3. C. The assessment, guided by an experienced sales engineer, helps determine the areas of greatest risk where you should focus prevention activities
4. D. It provides a set of questionnaires that help uncover security risk prevention gaps across all areas of network and security architecture

Correct Answer: C

An administrator is investigating a log entry for a session that is allowed and has the end reason of aged-out. Which two fields could help in determining if this is normal? (Choose two.)

1. A. Packets sent/received
2. B. IP Protocol
3. C. Action
4. D. Decrypted

Correct Answer: BD