Q17. What is a technical benefit of User-ID in relation to policy control?

Q18. The ability of a Next-Generation Firewall (NGFW) to logically group physical and virtual interfaces and then control traffic based on that grouping is known as what?

Q19. Which traffic will be blocked when application-default service is set on a Security policy?

Q20. Which architecture allows a Palo Alto Networks Next-Generation Firewall (NGFW) to achieve high performance with all security features enabled?

Q21. Which path will generate a stats dump file on a Palo Alto Networks Next-Generation Firewall (NGFW)?

Q22. In which two of the following scenarios is personal data excluded from protection under the General Data Protection Regulation (GDPR)?
Select 2 Correct Responses

Q23. Which architecture is unique to Palo Alto Networks and results in no additional performance overhead when enabling additional features?

Q24. Which subscription should be activated when a predefined, known malicious IP address is updated?

Q25. Which deployment method is used to integrate a firewall to be inline in an existing network but does not support additional routing or switching?

Q26. When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

Q27. To use App-ID effectively in Security policies, which three best practices should be followed? (Choose three.) Select 3 Correct Responses

Q28. Which Palo Alto Networks product offers a centrally managed firewall update process?

Q29. The Security Operations Center (SOC) has noticed that a user has large amounts of data going to and coming from an external encrypted website. The SOC would like to identify the data being sent to and received from this website.
Which Secure Sockets Layer (SSL) decryption method supported by Palo Alto Networks would allow the SOC to see this data?

Q30. Which two Cloud-Delivered Security Services (CDSS) would be appropriate for an organization that wants to secure internet traffic on a perimeter firewall? (Choose two.) Select 2 Correct Responses