Question 56

Which version of GlobalProtect supports split tunneling based on destination domain, client process, and HTTP/HTTPS video streaming application?
  • Question 57

    An administrator deploys PA-500 NGFWs as an active/passive high availability pair. The devices are not participating in dynamic routing and preemption is disabled.
    What must be verified to upgrade the firewalls to the most recent version of PAN-OS software?
  • Question 58

    Which feature prevents the submission of corporate login information into website forms?
  • Question 59

    A web server is hosted in the DMZ, and the server is configured to listen for incoming connections only on TCP port 8080. A Security policy rule allowing access from the Trust zone to the DMZ zone need to be configured to enable we browsing access to the server.
    Which application and service need to be configured to allow only cleartext web-browsing traffic to thins server on tcp/8080.
  • Question 60

    An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?