QUESTION 152
An administrator needs to allow users to use only certain email applications.
How should the administrator configure the firewall to restrict users to specific email applications?

QUESTION 153
Given the topology, which zone type should zone A and zone B to be configured with?

QUESTION 154
Which type of security policy rule will match traffic that flows between the Outside zone and inside zone, but would not match traffic that flows within the zones?

QUESTION 155
Which User Credential Detection method should be applied within a URL Filtering Security profile to check for the submission of a valid corporate username and the associated password?

QUESTION 156
Which rule type is appropriate for matching traffic occurring within a specified zone?
How should the administrator configure the firewall to restrict users to specific email applications?

QUESTION 157
An administrator is troubleshooting an issue with traffic that matches the interzone-default rule, which is set to default configuration.
What should the administrator do?

QUESTION 158
What are three valid information sources that can be used when tagging users to dynamic user groups? (Choose three.)

QUESTION 159
Which Palo Alto Networks service protects cloud-based applications such as Dropbox and Salesforce by monitoring permissions and shares and scanning files for sensitive information?

QUESTION 160
For the firewall to use Active Directory to authenticate users, which Server Profile is required in the Authentication Profile?

QUESTION 161
Which table for NAT and NPTv6 (IPv6-to-IPv6 Network Prefix Translation) settings is available only on Panorama?

QUESTION 162
What is the Anti-Spyware Security profile default action?

QUESTION 163
An administrator would like to silently drop traffic from the internet to a ftp server.
Which Security policy action should the administrator select?

QUESTION 164
Your company occupies one floor in a single building. You have two Active Directory domain controllers on a single network. The firewall’s management plane is only slightly utilized.
Which User-ID agent is sufficient in your network?

QUESTION 165
An administrator receives a global notification for a new malware that infects hosts. The infection will result in the infected host attempting to contact a command-and-control (C2) server. Which two security profile components will detect and prevent this threat after the firewall’s signature database has been updated?
(Choose two.)

QUESTION 166
How many levels can there be in a device-group hierarchy, below the shared level?

QUESTION 167
Which definition describes the guiding principle of the zero-trust architecture?

QUESTION 168
An administrator is configuring a NAT rule
At a minimum, which three forms of information are required? (Choose three.)

QUESTION 169
At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

QUESTION 170
Which URL Filtering Profile action does not generate a log entry when a user attempts to access a URL?

QUESTION 171

Given the topology, which zone type should you configure for firewall interface E1/1?

QUESTION 172
What is a default setting for NAT Translated Packets when the destination NAT translation is selected as Dynamic IP (with session distribution)?

QUESTION 173
Which Palo Alto network security operating platform component provides consolidated policy creation and centralized management?