Which three actions should be taken before deploying a firewall evaluation unit in the customer's environment? (Choose three.)
A. Inform the customer that they will need to provide a SPAN port for the evaluation unit assuming a TAP mode deployment.
B. Request that the customs make port 3978 available to allow the evaluation unit to communicate with Panorama.
C. Reset the evaluation unit to factory default to ensure that data from any previous customer evaluation is removed.
D. Upgrade the evaluation unit to the most current recommended firmware, unless a demo of the upgrade process is planned.
E. Set expectations around which information will be presented in the Security Lifecycle Review because sensitive information may be made visible.
How does SSL Forward Proxy decryption work?
A. SSL Forward Proxy decryption policy decrypts and inspects SSL/TLS traffic from internal users to the web.
B. The SSL Forward Proxy Firewall creates a certificate intended for the client that is intercepted and altered by the firewall.
C. If the server's certificate is signed by a CA that the firewall does not trust, the firewall will use the certificate only on Forward Trust.
D. The firewall resides between the internal client and internal server to intercept traffic between the two.
Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?
A. PE file upload to WildFire
B. WildFire hybrid deployment
C. 5 minute WildFire updates to threat signatures
D. Access to the WildFire API
Which design objective could be satisfied by vsys functionality?
A. Separation of routing tables used by different departments in company
B. Provide same-device high availability functionality for different departments in a company
C. Administrative separation of firewall policies used by different departments in company
D. Allocate firewall hardware resources to different departments in a company
What are two core values of the Palo Alto Network Security Platform? (Choose two)
A. Sale enablement of all applications
B. Deployment of multiple point-based solutions to provide full security coverage
C. Prevention of cyberattacks
D. Threat remediation
E. Defense against threats with static security solution
Which three policies or certificates must be configured for SSL Forward Proxy decryption? (Choose three.)
A. Forward trust certificate
B. Forward untrust certificate
C. A decrypt port mirror policy
D. Internal server certificate
E. A decryption policy
An administrator needs a PDF summary report that contains information compiled from existing reports
based on data for the top 5 in each category.
How often will the Administrator receive the report?
A. Bi-weekly
B. Daily
C. Weekly
D. Monthly
Because of regulatory compliance a customer cannot decrypt specific types of traffic.
Which license should an SE recommend to the customer who will be decrypting traffic on the Palo Alto Networks firewall?
A. App-ID, to use applications as match criteria in the decryption policy rules
B. SSL Decryption, for inbound inspection and granular Forward Proxy SSL decryption
C. Support, to request custom categories as match criteria in decryption policy rules
D. URL Filtering, to use predefined URL categories as match criteria in the decryption policy rules
What are two benefits of using Panorama for a customer who is deploying virtual firewalls to secure data center traffic? (Choose two.)
A. It can monitor the virtual firewalls' physical hosts and Vmotion them as necessary.
B. It can bootstrap the virtual firewall for dynamic deployment scenarios
C. It can manage the virtual firewalls' resource use, allowing for VM resource over-subscription.
D. It can provide the Automated Correlation Engine functionality, which the virtual firewalls do not support
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)
A. Client Probing
B. TACACS
C. eDirectory monitoring
D. SNMP server
E. Lotus Domino
F. RADIUS
G. Active Directory monitoring
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Palo Alto Networks exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your PSE-PLATFORM exam preparations and Palo Alto Networks certification application, do not hesitate to visit our Vcedump.com to find your solutions here.