NO.222 An administrator needs to implement an NGFW between their DMZ and Core network. EIGRP Routing between the two environments is required. Which interface type would support this business requirement?

NO.223 To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?

NO.224 When using the predefined default profile, the policy will inspect for viruses on the decoders. Match each decoder with its default action.
Answer options may be used more than once or not at all.

NO.225 An administrator has 750 firewalls The administrator’s central-management Panorama instance deploys dynamic updates to the firewalls The administrator notices that the dynamic updates from Panorama do not appear on some of the firewalls If Panorama pushes the configuration of a dynamic update schedule to managed firewalls, but the configuration does not appear what is the root cause?

NO.226 How does Panorama prompt VMWare NSX to quarantine an infected VM?

NO.227 Wildfire may be used for identifying which of the following types of traffic?

NO.228 Which two features does PAN-OS® software use to identify applications? (Choose two)

NO.229 If an administrator wants to decrypt SMTP traffic and possesses the server’s certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?

NO.230 An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables log forwarding from the firewalls to PanoramA.
Pre-existing logs from the firewalls are not appearing in PanoramA.
Which action would enable the firewalls to send their pre-existing logs to Panorama?

NO.231 While troubleshooting an SSL Forward Proxy decryption issue which PAN-OS CLI command would you use to check the details of the end-entity certificate that is signed by the Forward Trust Certificate or Forward Untrust Certificate?

NO.232 An administrator needs to optimize traffic to prefer business-critical applications over non-critical applications. QoS natively integrates with which feature to provide service quality?

NO.233 As a best practice, which URL category should you target first for SSL decryption*?

NO.234 An administrator device-group commit push is tailing due to a new URL category How should the administrator correct this issue?

NO.235 What are the differences between using a service versus using an application for Security Policy match?

NO.236 An administrator creates an SSL decryption rule decrypting traffic on all ports.
The administrator also creates a Security policy rule allowing only the applications DNS, SSL, and web-browsing.
The administrator generates three encrypted BitTorrent connections and checks the Traffic logs.
There are three entries. The first entry shows traffic dropped as application Unknown.
The next two entries show traffic allowed as application SSL.
Which action will stop the second and subsequent encrypted BitTorrent connections from being allowed as SSL?

NO.237 In High Availability, which information is transferred via the HA data link?

NO.238 Refer to the exhibit.

Which will be the egress interface if the traffic’s ingress interface is ethernet 1/7 sourcing from
192.168.111.3 and to the destination 10.46.41.113?

NO.239 Which two methods can be used to mitigate resource exhaustion of an application server? (Choose two)

NO.240 An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans. Which Security Profile type will protect against worms and trojans?

NO.241 An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors.
How would the administrator establish the chain of trust?