Q57. Which CLI allows you to view the names of SD-WAN policy rules that send traffic to the specified virtual SD-WAN interface, along with the performance metrics?
A)

B)

C)

D)

Q58. Which three new script types can be analyzed in WildFire? (Choose three.)

Q59. Which three of the following actions must be taken to enable Credential Phishing Prevention?
(Choose three.)

Q60. A customer is concerned about malicious activity occurring directly on their endpoints and will not be visible to their firewalls.
Which three actions does the Traps agent execute during a security event, beyond ensuring the prevention of this activity? (Choose three.)

Q61. Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

Q62. What will a Palo Alto Networks next-generation firewall (NGFW) do when it is unable to retrieve a DNS verdict from the DNS cloud service in the configured lookup time?

Q63. Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)

Q64. Which selection must be configured on PAN-OS External Dynamic Lists to support MineMeld indicators?

Q65. Which three new script types can be analyzed in WildFire? (Choose three.)

Q66. DNS sinkholing helps identify infected hosts on the protected network using DNS traffic in situations where the firewall cannot see the infected client’s DNS query (that is, the firewall cannot see the originator of DNS query) Which of the following Statements is true?

Q67. Which CLI command allows visibility into SD-WAN events such as path Selection and path quality measurements?

Q68. How do you configure the rate of file submissions to WildFire in the NGFW?

Q69. Which two actions can be taken to enforce protection from brute force attacks in the security policy? (Choose two.)

Q70. Select the BOM for the Prisma Access, to provide access for 5500 mobile users and 10 remote locations (100Mbps each) for one year, including Base Support and minimal logging. The customer already has 4x PA5220r 8x PA3220,1x Panorama VM for 25 devices.

Q71. True or False: PAN-DB is a service that aligns URLs with category types and is fed to the WildFire threat cloud.

Q72. In an HA pair running Active/Passive mode, over which interface do the dataplanes communicate?

Q73. Decryption port mirroring is now supported on which platform?

Q74. Access to a business site is blocked by URL Filtering inline machine learning (ML) and considered as a false-positive.
How should the site be made available?

Q75. Which filtering criterion is used to determine users to be included as members of a dynamic user group (DUG)?

Q76. What aspect of PAN-OS allows for the NGFW admin to create a policy that provides auto- remediation for anomalous user behavior and malicious activity while maintaining user visibility?