What two actions can be taken when implementing an exception to an External Dynamic List? (Choose two.)

Exclude an IP address by making use of wildcards.

Exclude a URL entry by making use of regular expressions.

Exclude an IP address by making use of wildcards.

Exclude a URL entry by making use of regular expressions.

Exclude an IP address by making use of regular expressions.

Exclude a URL entry by making use of wildcards.

Which Security policy set should be used to ensure that a policy is applied first?

Child device-group pre-rulebase

Parent device-group pre-rulebase

The administrator profile 'SYS01 Admin' is configured with authentication profile 'Authentication Sequence SYS01,' and the authentication sequence SYS01 has a profile list with four authentication profiles:* Auth Profile LDAP* Auth Profile Radius* Auth Profile Local* Auth Profile TACACSAfter a network outage, the LDAP server is no longer reachable. The RADIUS server is still reachable but has lost the 'SYS01 Admin' username and password.What is the 'SYS01 Admin' login capability after the outage?

Auth OK because of the Auth Profile Local

Auth KO because RADIUS server lost user and password for SYS01 Admin

Auth KO because LDAP server is not reachable

Auth OK because of the Auth Profile Local

Auth OK because of the Auth Profile TACACS -

When is an event displayed under threat logs?

When traffic matches a corresponding Security Profile

When traffic matches any Security policy

Every time a session is blocked

Every time the firewall drops a connection

Which Security profile should be applied in order to protect against illegal code execution?

Vulnerability Protection profile on allowed traffic

Antivirus profile on allowed traffic

Antivirus profile on denied traffic

Vulnerability Protection profile on denied traffic

Refer to the exhibit. Based on the network diagram provided, which two statements apply to traffic between the User and Server networks? (Choose two.)

Traffic is permitted through the default intrazone 'allow' rule.

Traffic restrictions are possible by modifying intrazone rules.

Traffic is permitted through the default intrazone 'allow' rule.

Traffic restrictions are possible by modifying intrazone rules.

Traffic restrictions are not possible, because the networks are in the same zone.

Traffic is permitted through the default interzone 'allow' rule.

What is the best-practice approach to logging traffic that traverses the firewall?

Enable log at session end only.

Enable both log at session start and log at session end.

Enable log at session start only.

Enable log at session end only.

Based on the image provided, which two statements apply to the Security policy rules? (Choose two.)

The Allow-Office-Programs rule is using an application filter.

The Allow-Social-Media rule allows all Facebook functions.

The Allow-Office-Programs rule is using an application filter.

The Allow-Office-Programs rule is using an application group.

The Allow-Social-Media rule allows all Facebook functions.

In the Allow-FTP policy, FTP is allowed using App-ID.

How would a Security policy need to be written to allow outbound traffic using Secure Shell (SSH) to destination ports tcp/22 and tcp/4422?

The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin also creates a custom service object named 'tcp-22' with port tcp/22. The admin then creates a Security policy allowing application 'ssh', service 'tcp-4422'. and service 'tcp-22'.

The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin then creates a Security policy allowing application 'ssh' and service 'tcp-4422'.

The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin then creates a Security policy allowing application 'ssh', service 'tcp-4422'. and service 'application-default'.

The admin creates a Security policy allowing application 'ssh' and service 'application-default'.

The admin creates a custom service object named 'tcp-4422' with port tcp/4422. The admin also creates a custom service object named 'tcp-22' with port tcp/22. The admin then creates a Security policy allowing application 'ssh', service 'tcp-4422'. and service 'tcp-22'.

What are the two main reasons a custom application is created? (Choose two.)

To correctly identify an internal application in the traffic log

To reduce unidentified traffic on a network

To correctly identify an internal application in the traffic log

To change the default categorization of an application

To visually group similar applications

To reduce unidentified traffic on a network

What Policy Optimizer policy view differ from the Security policy do?

It indicates rules with App-ID that are not configured as port-based.

It shows rules that are missing Security profile configurations.

It indicates rules with App-ID that are not configured as port-based.

It shows rules with the same Source Zones and Destination Zones.

It indicates that a broader rule matching the criteria is configured above a more specific rule.

How does the Policy Optimizer policy view differ from the Security policy view?

It provides sorting options that do not affect rule order.

It specifies applications seen by rules.

Which situation is recorded as a system log?

A connection with an authentication server has been dropped.

An attempt to access a spoofed website has been blocked.

A connection with an authentication server has been dropped.

A file that has been analyzed is potentially dangerous for the system.

A new asset has been discovered on the network.

Where within the URL Filtering security profile must a user configure the action to prevent credential submissions?

URL Filtering > Inline Categorization

URL Filtering > URL Filtering Settings

URL Filtering > HTTP Header Insertion

A network administrator creates an intrazone security policy rule on a NGFW. The source zones are set to IT. Finance, and HR.To which two types of traffic will the rule apply? (Choose two.)

Between zone IT and zone Finance

Which order of steps is the correct way to create a static route?

1) Enter the route and netmask 2) Enter the IP address for the specific next hop 3) Specify the outgoing interface for packets to use to go to the next hop 4) Add an IPv4 or IPv6 route by name

1) Enter the route and netmask 2) Specify the outgoing interface for packets to use to go to the next hop 3) Enter the IP address for the specific next hop 4) Add an IPv4 or IPv6 route by name

1) Enter the IP address for the specific next hop 2) Enter the route and netmask 3) Add an IPv4 or IPv6 route by name 4) Specify the outgoing interface for packets to use to go to the next hop

1) Enter the IP address for the specific next hop 2) Add an IPv4 or IPv6 route by name 3) Enter the route and netmask 4) Specify the outgoing interface for packets to use to go to the next hop