An administrator receives a number of email alerts indicating WildFire has prevented a malicious activity. All the prevention events refer to launching an Install Wizard that has received a benign verdict from WildFire. All...
Which two log types should be configured for firewall forwarding to the Cortex Data Lake for use by Cortex XDR? (Choose two)A . Security EventB . HIPC . CorrelationD . AnalyticsView AnswerAnswer: A,B
Which three Demisto incident type features can be customized under Settings > Advanced > Incident Types? (Choose three.)A . Define whether a playbook runs automatically when an incident type is encounteredB . Set reminders...
Based on the screenshot, what is the purpose of the Included Groups?A . They are groups that are imported from RADIUS authentication servers.B . They are the only groups visible based on the firewall’s...
Which statement is true regarding a Heatmap report?A . When guided by authorized sales engineer, it helps determine the areas of greatest security riskB . It runs only on firewalls.C . It provides a...
Which option is required to activate/retrieve a Device Management License on the M.100 Appliance after the Auth Codes have been activated on the Palo Alto Networks Support Site?A . Generate a Tech Support File...
DRAG DROP Match the Palo Alto Networks Security Operating Platform architecture to its description.View AnswerAnswer:
The administrator uses Restrictions to do what in the ESM Console?A . restrict which processes will be protected by which EPMs.B . restrict the execution of executable files.C . restrict which administrators can set...
Which statement about Malware verdicts is true?A . If WildFire is not available when the active ESM server tries to reach it for a verdict on a file, the endpoint will get a verdict...
Which three methods used to map users to IP addresses are supported in Palo Alto Networks firewalls? (Choose three.)A . Client ProbingB . TACACSC . eDirectory monitoringD . SNMP serverE . Lotus DominoF ....
