Q1. An engineer needs to collect User-ID mappings from the company's existing proxies. What two methods can be used to pull this data from third party proxies? (Choose two.)
A.Client probing
B. Syslog
C. XFF Headers
D. Server Monitoring
Correct Answer: B, C
Q2. Refer to the exhibit. Which will be the egress interface if the traffic's ingress interface is ethernet1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?
A.ethernet1/6
B. ethernet1/3
C. ethernet1/7
D. ethernet1/5
Correct Answer: D
Q3. What is the benefit of the Artificial Intelligence Operations (AIOps) Plugin for Panorama?
A.It automatically pushes the configuration to Panorama after strengthening the overall security posture
B. It proactively enforces best practices by validating new commits and advising if a policy needs work before pushing it to Panorama
C. The AIOps plugin in Panorama auto-corrects the security rules that failed the Best Practice Assessment
D. The AIOps plugin in Panorama retroactively checks the policy changes during the commits
Correct Answer: B
Q4. A company has a PA-3220 NGFW at the edge of its network and wants to use active directory groups in its Security policy rules. There are 1500 groups in its active directory. An engineer has been provided 800 active directory groups to be used in the Security policy rules. What is the engineer's next step?
A.Create a Group Mapping with 800 groups in the Group Include List.
B. Create two Group Include Lists, each with 400 Active Directory groups.
C. Create a Group Include List with the 800 Active Directory groups.
D. Create two Group Mappings, each with 400 groups in the Group Include List.
Correct Answer: B
Q5. An administrator configures a preemptive active-passive high availability (HA) pair of firewalls and configures the HA election settings on firewall-02 with a device priority value of 100, and firewall-01 with a device priority value of 90. When firewall-01 is rebooted, is there any action taken by the firewalls?
A.No - Neither firewall takes any action because firewall-01 cannot be rebooted when configured with device priority of 90.
B. No - Neither firewall takes any action because firewall-02 is already the active-primary member.
C. Yes - Firewall-02 takes over as the active-primary firewall; firewall-01 takes over as the active-primary member after it becomes functional.
D. Yes - Firewall-02 takes over as the active-primary firewall; firewall-02 remains the active-primary member after firewall-01 becomes functional.
Correct Answer: C
$ 39
Reviews
There are no reviews yet.