An administrator would like to create a URL Filtering log entry when users browse to any gambling website. What combination of Security policy and Security profile actions is correct?

1. A. Security policy = drop, Gambling category in URL profile = allow
2. B. Security policy = den
3. C. Gambling category in URL profile = block
4. D. Security policy = allow, Gambling category in URL profile = alert
5. E. Security policy = allo
6. F. Gambling category in URL profile = allow

Correct Answer: C

A security administrator has configured App-ID updates to be automatically downloaded and installed. The company is currently using an application identified by App-ID asSuperApp_base.
On a content update notice, Palo Alto Networks is adding new app signatures labeled SuperApp_chat and SuperApp_download, which will be deployed in 30 days.
Based on the information, how is the SuperApp traffic affected after the 30 days have passed?

1. A. All traffic matching the SuperApp_chat, and SuperApp_download is denied because it no longer matches the SuperApp-base application
2. B. No impact because the apps were automatically downloaded and installed
3. C. No impact because the firewall automatically adds the rules to the App-ID interface
4. D. All traffic matching the SuperApp_base, SuperApp_chat, and SuperApp_download is denied until the security administrator approves the applications

Correct Answer: A
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/app-id/manage-new-app-ids-introduced-in-content-releases/review-new-app-id-impact-on-existing-policy-rules

The compliance officer requests that all evasive applications need to be blocked on all perimeter firewalls out to the internet The firewall is configured with two zones;
* 1. trust for internal networks
* 2. untrust to the internet
Based on the capabilities of the Palo Alto Networks NGFW, what are two ways to configure a security policy using App-ID to comply with this request? (Choose two )

1. A. Create a deny rule at the top of the policy from trust to untrust with service application- default and add an application filter with the evasive characteristic
2. B. Create a deny rule at the top of the policy from trust to untrust over any service and select evasive as the application
3. C. Create a deny rule at the top of the policy from trust to untrust with service application- default and select evasive as the application
4. D. Create a deny rule at the top of the policy from trust to untrust over any service and add an application filter with the evasive characteristic

Correct Answer: AD

Which two components are utilized within the Single-Pass Parallel Processing architecture on a Palo Alto Networks Firewall? (Choose two.)

1. A. Layer-ID
2. B. User-ID
3. C. QoS-ID
4. D. App-ID

Correct Answer: BD

The firewall sends employees an application block page when they try to access Youtube. Which Security policy rule is blocking the youtube application?

1. A. intrazone-default
2. B. Deny Google
3. C. allowed-security services
4. D. interzone-default

Correct Answer: D