What is the minimum configuration to stop a Cobalt Strike Malleable C2 attack inline and in real time?

1. A. Next-Generation CASB on PAN-OS 10.1
2. B. Advanced Threat Prevention and PAN-OS 10.2
3. C. Threat Prevention and Advanced WildFire with PAN-OS 10.0
4. D. DNS Security, Threat Prevention, and Advanced WildFire with PAN-OS 9.x

Correct Answer: B

What are three valid Panorama deployment options? (Choose three.)

1. A. As a virtual machine (ESXi, Hyper-V, KVM)
2. B. With a cloud service provider (AWS, Azure, GCP)
3. C. As a container (Docker, Kubernetes, OpenShift)
4. D. On a Raspberry Pi (Model 4, Model 400, Model 5)
5. E. As a dedicated hardware appliance (M-100, M-200, M-500, M-600)

Correct Answer: ABE

A large global company plans to acquire 500 NGFWs to replace its legacy firewalls and has a specific requirement for centralized logging and reporting capabilities.
What should a systems engineer recommend?

1. A. Combine Panorama for firewall management with Palo Alto Networks' cloud-based Strata Logging Service to offer scalability for the company's logging and reportinginfrastructure.
2. B. Use Panorama for firewall management and to transfer logs from the 500 firewalls directly to a third-party SIEM for centralized logging and reporting.
3. C. Highlight the efficiency of PAN-OS, which employs AI to automatically extract critical logs and generate daily executive reports, and confirm that the purchase of 500 NGFWs is sufficient.
4. D. Deploy a pair of M-1000 log collectors in the customer data center, and route logs from all 500 firewalls to the log collectors for centralized logging and reporting.

Correct Answer: A

Which three use cases are specific to Policy Optimizer? (Choose three.)

1. A. Discovering applications on the network and transitions to application-based policy over time
2. B. Converting broad rules based on application filters into narrow rules based on application groups
3. C. Enabling migration from port-based rules to application-based rules
4. D. Discovering 5-tuple attributes that can be simplified to 4-tuple attributes
5. E. Automating the tagging of rules based on historical log data

Correct Answer: ACE

A company has multiple business units, each of which manages its own user directories and identity providers (IdPs) with different domain names. The company??s network security team wants to deploy a shared GlobalProtect remote access service for all business units to authenticate users to each business unit's IdP.
Which configuration will enable the network security team to authenticate GlobalProtect users to multiple SAML IdPs?

1. A. GlobalProtect with multiple authentication profiles for each SAML IdP
2. B. Multiple authentication mode Cloud Identity Engine authentication profile for use on the GlobalProtect portals and gateways
3. C. Authentication sequence that has multiple authentication profiles using different authentication methods
4. D. Multiple Cloud Identity Engine tenants for each business unit

Correct Answer: A