Question 1

Given the network diagram, traffic should be permitted for both Trusted and Guest users to accessgeneral Internet and DMZ servers using SSH. web-browsing and SSL applicationsWhich policy achieves the desired results?

Options :

A :

B :

C :

D :

Answer: C

Question 2

Access to which feature requires the PAN-OS Filtering license?

Options :

A : PAN-DB database

B : DNS Security

C : Custom URL categories

D : URL external dynamic lists

Answer: A

Question 3

What is the default action for the SYN Flood option within the DoS Protection profile?

Options :

A : Alert

B : Random Early Drop

C : Reset-client

D : Sinkhole

Answer: B

Question 4

Which path in PAN-OS 10.2 is used to schedule a content update to managed devices using Panorama?

Options :

A : Panorama > Device Deployment > Dynamic Updates > Schedules > Add

B : Panorama > Device Deployment > Content Updates > Schedules > Add

C : Panorama > Dynamic Updates > Device Deployment > Schedules > Add

D : Panorama > Content Updates > Device Deployment > Schedules > Add

Answer: A

Question 5

Which three types of authentication services can be used to authenticate user traffic flowing throughthe firewalls data plane? (Choose three )

Options :

A : TACACS

B : SAML2

C : SAML10

D : Kerberos

E : TACACS+

Answer: A,B,D