PSE-Platform 무료 덤프문제 온라인 액세스

What is a best practice when configuring a security policy to completely block a specific application?

• A.On the Service/URL. Category tab, manually specify a port/service
• B.One the Service/URL. Category tab, set the service to any
• C.On the Service/URL. Category tab, set the service to application-default
• D.On the Actions tab, configure a file blocking security profile

What are three sources of malware sample data for the Palo Alto Networks Threat Intelligence Cloud? (Choose three.)

• A.Palo Alto Networks non-firewall products, like Traps and Aperture
• B.Third-Party data feeds, like the partnership with ProofPoint and the Cyber Threat Alliance
• C.Palo Alto Networks Next Generation Firewalls deployed with Wildfire Analysis Security Profiles
• D.Palo Alto Networks AutoFocus generated Correlation Objects
• E.WF-500 configured as private clouds for privacy concerns

A prospective customer was the victim of a zero-day attack that compromised specific employees, who then became unwitting attack vectors. The customer does not want that to happen again.
Which two Palo Alto Networks platform components will help this customer? (Choose two.)

• A.Traps
• B.Correlation Objects
• C.Wildfire
• D.Autofocus

Which profile or policy should be applied to protect against port scans from the internet?

• A.Zone protection profile on the zone of the ingress interface
• B.Interface management profile on the zone of the ingress interface
• C.Security profiles to security policy rules for traffic sourcing from the untrust zone
• D.An App-ID security policy rule to block traffic sourcing from the untrust zone

What is the recommended way to ensure that firewalls have the most current set of signatures for up-to-date protection?

• A.Store updates on an intermediary server and point all the firewalls to it
• B.Run a Perl script to regularly check for updates and alert when one in released
• C.Utilize dynamic updates with an aggressive update schedule
• D.Monitor update announcements and manually push updates to firewalls