Which Captive Portal mode must be configured to support MFA authentication?

A.

NTLM

B.

Redirect

C.

Single Sign-On

D.

Transparent

An administrator needs to determine why users onthe trust zone cannot reach certain websites. The only
information available is shown on the following image. Which configuration change should the administrator make?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

E.

OptionE

An administrator wants multiple web servers in the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10.1.1.22

Based on the information shown in the image, which NAT rule will forward web-browsing traffic correctly?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

An administrator needs to upgrade an NGFW to the most current version of PAN-OS® software. The
following is occurring:
Firewall has Internet connectivity through e1/1.
•Default security rules and security rules allowing all SSL and web-browsing traffic to and from any zone.
•Service route is configured, sourcing update traffic from e1/1.
•A communication error appears in the System logs when updates are performed.
•Download does not complete.
What must be configured to enable the firewall to download the current version of PAN-OS software?

A.

DNS settings for the firewall to use for resolution

B.

scheduler for timed downloads of PAN-OS software

C.

static route pointing application PaloAlto-updates to the update servers

D.

Security policy ruleallowing PaloAlto-updates as the application

In a virtual router, which object contains all potential routes?

A.

MIB

B.

RIB

C.

SIP

D.

FIB

An administrator needs to optimize traffic to prefer business-criticalapplications over non-critical applications. QoS natively integrates with which feature to provide service quality?

A.

Port Inspection

B.

Certificate revocation

C.

Content-ID

D.

App-ID

Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

A.

The firewall is in multi-vsys mode.

B.

The traffic is offloaded.

C.

The traffic does not match the packet capture filter.

D.

The firewall’s DP CPU is higher than 50%.

Which operation will impact the performanceof the management plane?

A.

WildFire Submissions

B.

DoS Protection

C.

decrypting SSL Sessions

D.

Generating a SaaS Application Report.

E.

Generating a SaaS Application Report.

Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OS®version, and serial number?

A.

debug system details

B.

show session info

C.

show system info

D.

show system details

An administrator has left a firewall to use the default port for all management services. Which three functions are performed by the dataplane?(Choose three.)

A.

WildFire updates

B.

NAT

C.

NTP

D.

antivirus

E.

File blocking