Question 106

A user's traffic traversing a Palo Alto Networks NGFW sometimes can reach
http://www.company.com. At other times the session times out. The NGFW has been configured with a PBF rule that the user's traffic matches when it goes to
http://www.company.com.
How can the firewall be configured automatically disable the PBF rule if the next hop goes down?
  • Question 107


    What will be the source address in the ICMP packet?
  • Question 108

    A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects.
    How would an administrator configure the interface to 1Gbps?
  • Question 109

    Refer to Exhibit:


    A firewall has three PDF rules and a default route with a next hop of 172.29.19.1 that is configured in the default VR. A user named XX-bes a PC with a 192.168.101.10 IP address.
    He makes an HTTPS connection to 172.16.10.29.
    What is the next hop IP address for the HTTPS traffic from Wills PC.
  • Question 110

    Which GlobalProtect Client connect method requires the distribution and use of machine certificates?