Palo Alto Networks Systems Engineer (PSE) - Strata Associate: PSE-STRATA-ASSOCIATE

When deploying an Eval Next-Generation Firewall (NGFW) within a customer environment for the purpose of generating a Security Lifecycle Review (SLR) report, creation of which interface will not impact production traffic?

A. Layer 3 interface

B. SLR interface

C. virtual wire interface

D. TAP interface

A Human Resources (HR) application has the URL of https://hr.company.com:4433/.

How should the "Service" column of the Security policy be set to match and permit this application?

A. Define and then select a new custom Transmission Control Protocol (TCP) service with port 4433.

B. Edit "service-https" to use port 4433.

C. Set to "service-http".

D. Set to "application-defaults," which will locate and match the HR application.

Which of the following statements applies to enabling App-ID on a Next-Generation Firewall (NGFW)?

A. No additional purchase is required, but App-ID must be enabled for the customer to use it.

B. An App-ID subscription must be purchased and enabled.

C. No configuration is required, because App-ID is always enabled by default.

D. A Threat Protection license must be purchased and enabled.