Based on the diagram, prioritize the order in which the Virtual Gateway evaluates the best route based on the deterministic B6P Path selection process.
Select and Place:
Which three features are not supported by VM-Series NGFWs on Azure Stack? (Choose three.)
A. Azure Application Insight
B. Resource Group
C. Azure Security Center
D. Bootstrapping
E. ARM Template
Which regulatory framework in Prisma Public Cloud measures compliance with EU data privacy regulations in Amazon Web Services workloads?
A. GDPR
B. EU Data Protection Directive 95/46/EC
C. ISO 27001
D. Payment Card Industry 3.0
The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic. How does Amazon Web Services achieve this integration?
A. SNS
B. SQS
C. CodeDeploy
D. Lambda
In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)
A. fully instrumented API
B. Aperture Orchestration Engine
C. VM Orchestration Policy Editor
D. support for Dynamic Address Groups
Which two cloud providers support Load Balancers as next hop configurations for outbound connections? (Choose two.)
A. Google Cloud Platform
B. Microsoft Azure
C. Oracle Cloud
D. Amazon Web Services
What are two ways to enable interface swap when deploying a VM-Series NGFW in Google Cloud Platform? (Choose two.)
A. run the PAN-OS CLI command: set system mgmt-interface-swap enable yes
B. run the PAN-OS CLI command: set system mgmt-interface-swap setting enable yes
C. create a bootstrap file that includes the mgmt-interface-swap command
D. in the Google Cloud Console Metadata Field, enter a key-value pair where mgmt-interface-swap is the key and enable is the value
Which RQL string using network query attributes returns all traffic destined for Internet or for Suspicious IPs that also exceeds 1GB?
A. network where publicnetwork = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
B. network where dest.publicnetwork IN ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
C. show traffic where destination.network = ('Internet IPs', 'Suspicious IPs') AND bytes > 1000000000
D. network where bytes > 1GB and destination = 'Internet IPs' OR 'Suspicious IPs'
Which RQL string monitors all traffic from the Internet and Suspicious IPs destined for your Amazon Web Services databases?
A. network where source.publicnetwork IN ('Suspicious IPs') and dest.resource IN (resource where role IN ('AWS RDS', 'Database'))
B. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest.resource IN (resource where role IN ('LDAP'))
C. network where dest.resource IN (resource where role = 'Database'}
D. network where source.publicnetwork IN ('Suspicious IPs', 'Internet IPs') and dest resource IN (resource where role IN ('AWS RDS'. 'Database'))
Which option is true about VM-Series NGFW templates available from the Palo Alto Networks GitHub repository?
A. Palo Alto Networks provides full support if a valid support license is in place.
B. Support for the templates is available through Professional Services from Palo Alto Networks.
C. Unless otherwise noted, these templates are released under an as-is. best effort support policy.
D. The author of the template provides full support as long as the PAN-OS version specific to the template is supported.
