An administrator discovers that a file blocked by the WildFire inline ML feature on the firewall is a false-positive action. How can the administrator create an exception for this particular file?
Correct Answer: A
Explanation https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/threat-prevention/wildfire-inline-ml/configure-wild "The File Exceptions table allows you to define specific files that you do not want analyzed, such as false-positives. To create a new file exception entry, Add a new entry and provide the partial hash, filename, and description of the file that you want to exclude from enforcement."https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/objects/objects-security-
Question 87
Which three actions can Panorama perform when deploying PAN-OS images to its managed devices? (Choose three.)
Match the terms to their corresponding definitions
Correct Answer:
Provides configuration logging and reporting functions on a separate processor RAM. and hard drive -> Management plane Steam-based uniform signature matching including vulnerability exploits (IPS) virus. spyware. CC#. and SSN -> Signature matching High-density parallel processing for flexible hardware acceleration for standardized complex functions -> Security processing Hardware-accelerated per-packet route lookup MAC lookup and NAT -> Network processing
Question 89
Which three use cases are valid reasons for requiring an Active/Active high availability deployment? (Choose three.)
Correct Answer: A,C,E
Explanation Active/Active high availability is a deployment mode that allows both firewalls in an HA pair to actively process traffic and share the load. Active/Active HA is suitable for environments that require real, full-time redundancy from both firewalls at all times, as there is no failover time or session loss in case of a firewall failure. Active/Active HA is also suitable for environments that require that both firewalls maintain their own routing tables for faster dynamic routing protocol convergence, as each firewall can run its own routing protocols and exchange routes with other routers independently. Active/Active HA is also suitable for environments that require that traffic be load-balanced across both firewalls to handle peak traffic spikes, as each firewall can process a portion of the traffic and increase the overall throughput and performance. Active/Active HA is not suitable for environments that require Layer 2 interfaces in the deployment, as Layer 2 interfaces are not supported in Active/Active HA mode. Active/Active HA is also not suitable for environments that require that all configuration must be fully synchronized between both members of the HA pair, as some configuration settings are not synchronized in Active/Active HA mode, such as virtual router configuration, virtual wire configuration, and QoS configuration. References: : https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/set-up-activeactive-ha : https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/high-availability/set-up-activeactive-ha/determine-
Question 90
An engineer is tasked with enabling SSL decryption across the environment. What are three valid parameters of an SSL Decryption policy? (Choose three.)
