- (Exam Topic 2)
A customer wants to set up a site-to-site VPN using tunnel interfaces? Which two formats are correct for naming tunnel interfaces? (Choose two.)

Correct Answer:CD

- (Exam Topic 2)
An administrator wants multiple web servers in the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10.1.1.22

Based on the information shown in the image, which NAT rule will forward web-browsing traffic correctly? A)

B)

C)

D)

Correct Answer:C

- (Exam Topic 2)
Which feature can provide NGFWs with User-ID mapping information?

Correct Answer:A

- (Exam Topic 2)
Which tool provides an administrator the ability to see trends in traffic over periods of time, such as threats detected in the last 30 days?

Correct Answer:B
Reference:
https://live.paloaltonetworks.com/t5/Management-Articles/Tips-amp-Tricks-How-to-Use-the-Application-Comm ACC/ta-p/67342

- (Exam Topic 3)
In an enterprise deployment, a network security engineer wants to assign to a group of administrators without creating local administrator accounts on the firewall.
Which authentication method must be used?

Correct Answer:D

- (Exam Topic 2)
For which two reasons would a firewall discard a packet as part of the packet flow sequence? (Choose two )

Correct Answer:BD