A network security administrator wants to inspect HTTPS traffic from users as it egresses through a firewall to the Internet/Untrust zone from trusted network zones. The security admin wishes to ensure that if users are presented with invalid or untrusted security certificates, the user will see an untrusted certificate warning.
What is the best choice for an SSL Forward Untrust certificate?

How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

The firewall identifies a popular application as an unknown-tcp.
Which two options are available to identify the application? (Choose two.)

How can an administrator configure the NGFW to automatically quarantine a device using GlobalProtect?

A network engineer has discovered that asymmetric routing is causing a Palo Alto Networks firewall to drop traffic. The network architecture cannot be changed to correct this.
Which two actions can be taken on the firewall to allow the dropped traffic permanently? (Choose two.)