Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Deploy a VM-Series firewall in AWS in each VPC, create an IPSec tunnel between AWS and Azure, and manage the policy with Panorama.
• B

  B. Deploy Cloud NGFW for Azure in vNET/s, update the vNET/s routing to path traffic through the deployed NGFWs, and manage the policy with Panorama.
• C

  C. Deploy Cloud NGFW for Azure in vWAN, create a vWAN to route all appropriate traffic to the Cloud NGFW attached to the vWAN, and manage the policy with local rules.
• D

  D. Deploy Cloud NGFW for AWS in a centralized Security VPC, update the Transit Gateway to route all appropriate traffic through the Security VPC, and manage the policy with Panorama.

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. PA-5280, PA-7080, PA-3250, VM-Series
• B

  B. PA-455, VM-Series, PA-1410, PA-5450
• C

  C. PA-3260, PA-5410, PA-850, PA-460
• D

  D. PA-7050, PA-1420, VM-Series, CN-Series

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. For incoming and outgoing traffic through the tunnel, creating separate rules for each direction is optional.
• B

  B. The IKE negotiation and IPSec/ESP packets are allowed by default via the intrazone default allow policy.
• C

  C. For incoming and outgoing traffic through the tunnel, separate rules must be created for each direction.
• D

  D. The IKE negotiation and IPSec/ESP packets are denied by default via the interzone default deny policy.

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. It acts as a logging service for NGFW performance metrics.
• B

  B. It orchestrates real-time traffic inspection for network segments.
• C

  C. It provides Infrastructure-as-Code (IaC) to automate NGFW deployment.
• D

  D. It manages threat intelligence data synchronization with NGFWs.

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Security zone
• B

  B. IPSec tunnel
• C

  C. Virtual system (VSYS)
• D

  D. Autonomous Digital Experience Manager (ADEM)

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. License
• B

  B. Plugin
• C

  C. Content update
• D

  D. General setting

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Tunnel
• B

  B. Intrazone
• C

  C. Internal
• D

  D. Virtual Wire

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. The GlobalProtect agent uses the machine certificate to establish a pre-logon tunnel; upon user sign-in, it prompts for SAML-based MFA credentials, ensuring both device and user identities are validated before granting full access.
• B

  B. The GlobalProtect agent uses the machine certificate during pre-logon for initial tunnel establishment, and then seamlessly reuses the same machine certificate for user-based authentication without requiring MFA.
• C

  C. Once the machine certificate is validated at pre-logon, the Windows endpoint completes MFA on behalf of the user by passing existing Windows Credential Provider details to the GlobalProtect gateway without prompting the user.
• D

  D. GlobalProtect requires the user to log in first for SAML-based MFA before establishing the pre-logon tunnel, rendering the pre-logon certificate authentication (CA) flow redundant.

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Modify all active Log Forwarding profiles to select the “Cloud Logging” option in each profile match list in the appropriate device groups.
• B

  B. Enable the “ Panorama/Cloud Logging ” option in the Logging and Reporting Settings section under Device --> Setup --> Management in the appropriate templates.
• C

  C. Select the “Enable Duplicate Logging” option in the Cloud Logging section under Device --> Setup --> Management in the appropriate templates.
• D

  D. Select the “Enable Cloud Logging” option in the Cloud Logging section under Device --> Setup --> Management in the appropriate templates.

Discussions

No linked threads captured.

Answers

Correct answer and vote data stay hidden until you click reveal.

• A

  A. Configure each interface to belong to the same Layer 2 zone and enable IP routing between them.
• B

  B. Assign each interface to the appropriate Layer 2 zone and configure a policy that allows traffic within the VLAN.
• C

  C. Assign each interface to the appropriate Layer 2 zone and configure Security policies for interfaces not assigned to the same zone.
• D

  D. Enable IP routing between the interfaces and configure a Security policy to allow traffic between interfaces within the VLAN.

Discussions

No linked threads captured.