Which three items contain information about Command and Control (C&C) hosts? (Choose three.)
Answer : B, C, E
What is a best practice when configuring a security policy to completely block a specific application?
Answer : A
Which three actions should be taken before deploying a firewall evaluation unit in the customer's environment? (Choose three.)
Answer : A, C, D
Which three policies or certificates must be configured for SSL Forward Proxy decryption? (Choose three.)
Answer : A, B, E
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/decryption/keys-and-certificates-for-decryption-policies#_40372
A customer is targeted by a true zero-day, targeted attack. However, the customer is protected by the Palo Alto Networks security platform.
The attack leverages a previously unknown vulnerability in IE but utilizes existing hacking techniques on the endpoint. It is transported over standard HTTP traffic and conforms to the HTML standards. It then attempts to download from a website, compromised specifically for this attack, a custom piece of malware to run on the endpoints.
Which element of the platform will stop this attack?
Answer : D
The botnet report displays a confidence score of 1 to 5 indicating the likelihood of a botnet infection.
Which three sources are used by the firewall as the basis of this score? (Choose three.)
Answer : B, D, E
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/monitoring/generate-botnet-reports
Which two designs require virtual systems? (Choose two.)
Answer : B, C