You need to allow users to access the office-suite applications of their choice. How should you configure the firewall to allow access to any office-suite application?

1. A. Create an Application Group and add Office 365, Evernote Google Docs and Libre Office
2. B. Create an Application Group and add business-systems to it.
3. C. Create an Application Filter and name it Office Programs, then filter it on the office programs subcategory.
4. D. Create an Application Filter and name it Office Programs then filter on the business-systems category.

Correct Answer: C

Using multiple templates in a stack to manage many firewalls provides which two advantages? (Choose two.)

1. A. inherit address-objects from templates
2. B. define a common standard template configuration for firewalls
3. C. standardize server profiles and authentication configuration across all stacks
4. D. standardize log-forwarding profiles for security polices across all stacks

Correct Answer: BD

A network security administrator wants to configure SSL inbound inspection.
Which three components are necessary for inspecting the HTTPS traffic as it enters the firewall? (Choose three.)

1. A. An SSL/TLS Service profile
2. B. The web server's security certificate with the private key
3. C. A Decryption profile
4. D. A Decryption policy
5. E. The client's security certificate with the private key

Correct Answer: BCD
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/configure-ssl-inbound-inspection

Which statement regarding HA timer settings is true?

1. A. Use the Recommended profile for typical failover timer settings
2. B. Use the Moderate profile for typical failover timer settings
3. C. Use the Aggressive profile for slower failover timer settings.
4. D. Use the Critical profile for faster failover timer settings.

Correct Answer: A

A network security administrator has been tasked with deploying User-ID in their organization. What are three valid methods of collecting User-ID information in a network? (Choose three.)

1. A. Windows User-ID agent
2. B. GlobalProtect
3. C. XMLAPI
4. D. External dynamic list
5. E. Dynamic user groups

Correct Answer: ABC
User-ID is a feature that enables the firewall to identify users and groups based on their IP addresses, usernames, or other attributes.
There are three valid methods of collecting User-ID information in a network:
Windows User-ID agent: This is a software agent that runs on a Windows server and collects user mapping information from Active Directory, Exchange servers, or other sources.
GlobalProtect: This is a VPN solution that provides secure remote access for users and devices. It also collects user mapping information from endpoints that connect to the firewall using GlobalProtect.
XMLAPI: This is an application programming interface that allows third-party applications or scripts to send user mapping information to the firewall using XML format.