Which functionality is available to firewall users with an active Threat Prevention subscription, but no WildFire license?

What will best enhance security of a production online system while minimizing the impact for the existing network?

Which design objective could be satisfied by vsys functionality?

A prospective customer was the victim of a zero-day attack that compromised specific employees, who then became unwitting attack vectors. The customer does not want that to happen again.
Which two Palo Alto Networks platform components will help this customer? (Choose two.)

Where are three tuning considerations when building a security policy to protect against modern day attacks? (Choose three)