Question 1

Which two log types are necessary to fully investigate a network intrusion? (Choose two)

Options :

A : URL Filtering log

B : Traffic log

C : Threat log

D : System log

Answer: B,C

Question 2

An existing customer who has deployed several Palo Alto Networks Next-Generation Firewalls would like to start using Device-ID to obtain policy rule recommendations They have also purchased a Support license, a Threat license a URL Filtering license, and a WildFire license for each firewall What additional license do they need to purchase"?

Options :

A : a Cortex Data Lake license

B : an Enterprise Data Loss Prevention (DLP) license

C : an loT Security license (or the perimeter firewall

D : an loT Security license for each deployed firewall

Answer: A

Question 3

Which feature allows you to use multiple links simultaneously to balance the load in a Palo Alto Networks firewall?

Options :

A : High Availability

B : Aggregate Ethernet

C : Virtual Wire

D : ECMP (Equal-Cost Multi-Path)

Answer: D

Question 4

Which category of Vulnerability Signatures is most likely to trigger false positive alerts?

Options :

A : code-execution

B : phishing

C : info-leak

D : brute-force

Answer: C