Which two actions take place after Prisma SD-WAN Instant-On Network (ION) devices have been deployed at a site? (Choose two.)

A. The devices continually sync the information from directories, whether they are on- premise, cloud-based, or hybrid.

B. The devices establish VPNs over private WAN circuits that share a common service provider.

C. The devices automatically establish a VPN to the data centers over every internet circuit.

D. The devices provide an abstraction layer between the Prisma SD-WAN controller and a particular cloud service.

Which product draws on data collected through PAN-OS device telemetry to provide an overview of the health of an organization's next-generation firewall (NGFW) deployment and identify areas for improvement?

A. Cloud Identity Engine (CIE)

B. DNS Security

C. security information and event management (SIEM)

D. Device Insights

What are two benefits of installing hardware fail-to-wire port pairs on Instant-On Network (ION) devices? (Choose two.)

A. local area network (LAN) Dynamic Host Configuration Protocol (DHCP) and DHCP relay functionality

B. control mode insertion without modification of existing network configuration

C. network controller communication and monitoring

D. ensures automatic failover when ION devices experience software or network related failure

Which product enables websites to be rendered in a sandbox environment in order to detect and remove malware and threats before they reach the endpoint?

A. remote browser isolation

B. secure web gateway (SWG)

C. network sandbox

D. DNS Security

What is a benefit of a cloud-based secure access service edge (SASE) infrastructure over a Zero Trust Network Access (ZTNA) product based on a software-defined perimeter (SDP) model?

A. Users, devices, and apps are identified no matter where they connect from.

B. Connection to physical SD-WAN hubs in ther locations provides increased interconnectivity between branch offices.

C. Complexity of connecting to a gateway is increased, providing additional protection.

D. Virtual private network (VPN) services are used for remote access to the internal data center, but not the cloud.

What are two ways service connections and remote network connections differ? (Choose two.)

A. Remote network connections provide secondary WAN options, but service connections use backup service connection for redundancy.

B. Remote network connections enforce security policies, but service connections do not.

C. An on-premises resource cannot originate a connection to the internet over a service connection.

D. Service connections support both OSPF and BGP for routing protocols, but remote networks support only BGP.

What is a differentiator between the Palo Alto Networks secure access service edge (SASE) solution and competitor solutions?

A. path analysis

B. playbooks

C. ticketing systems

D. inspections

Which two key benefits have been identified for a customer investing in the Palo Alto Networks Prisma secure access service edge (SASE) solution? (Choose two.)

A. decreased likelihood of a data breach

B. reduced input required from management during third-party investigations

C. decreased need for interaction between branches

D. reduced number of security incidents requiring manual investigation

A customer currently has 150 Mbps of capacity at a site. Records show that, on average, a total of 30 Mbps of bandwidth is used for the two links.

What is the appropriate Prisma SD-WAN license for this site?

A. 50 Mbps

B. 175 Mbps

C. 250 Mbps

D. 25 Mbps

In which step of the Five-Step Methodology for implementing the Zero Trust model are the services most valuable to the company defined?

A. Step 2: Map the transaction flows

B. Step 4: Create the Zero Trust policy

C. Step 5: Monitor and maintain the network

D. Step 1: Define the protect surface