By default, what is the maximum number of templates that can be added to a template stack?

1. A. 6
2. B. 8
3. C. 10
4. D. 12

Correct Answer: B
By default, the maximum number of templates that can be added to a template stack is 8. This is the recommended limit for performance reasons, as adding more templates may result in sluggish responses on the user interface. However, starting from PAN-OS 8.1.10 and 9.0.4, you can use a debug command to increase the maximum number of templates per stack to 16. This command requires a commit operation to take effect.
A template stack is a collection of templates that you can use to push common settings to multiple firewalls or Panorama managed collectors. A template contains the network and device settings that you want to share across devices, such as interfaces, zones, virtual routers, DNS, NTP, and login banners. You can create multiple templates for different device groups or locations and add them to a template stack in a hierarchical order. The settings in the lower templates override the settings in the higher templates if there are any conflicts. You can then assign a template stack to one or more devices and push the configuration changes.

Four configuration choices are listed, and each could be used to block access to a specific URL. If you configured each choices to block the sameURL then which choice would be the last to block access to the URL?
Solution:
The precedence is from the top down; First Match Wins: 1) Block list: Manually entered blocked URLs Objects - 2) Allow list: Manually entered allowed URLs Objects - 3) Custom URL Categories - 4) Cached Cached: URLs learned from External Dynamic Lists (EDLs) -
5) Pre-Defined Categories: PAN-DB or Brightcloud categories.

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

An administrator would like to use App-ID's deny action for an application and would like that action updated with dynamic updates as new content becomes available.
Which security policy action causes this?

1. A. Reset server
2. B. Reset both
3. C. Deny
4. D. Drop

Correct Answer: C
Explanation/Reference: Reference:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/firewall- administration/manage- configuration backups/revert-firewall-configuration- changes.html

What are the requirements for using Palo Alto Networks EDL Hosting Sen/ice?

1. A. any supported Palo Alto Networks firewall or Prisma Access firewall
2. B. an additional subscription free of charge
3. C. a firewall device running with a minimum version of PAN-OS 10.1
4. D. an additional paid subscription

Correct Answer: A

FILL IN THE BLANK
Refer to the exhibit. An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two Security policy rules will accomplish this configuration? (Choose two.) A- Untrust (Any) to DMZ (1.1.1.100), ssh - Allow

1. A. Untrust (Any) to Untrust (10.1.1.1), web-browsing -Allow
2. B. Untrust (Any) to Untrust (10.1.1.1), ssh -Allow
3. C. Untrust (Any)to DMZ (10.1.1.100. 10.1.1.101), ssh, web-browsing-Allow
4. D. Untrust (Any) to DMZ (1.1.1.100), web-browsing - Allow

Correct Answer: AE