When configuring Admin Roles for Web UI access, what are the available access levels?

A. Enable and Disable only

B. None, Superuser, Device Administrator

C. Allow and Deny only

D. Enable, Read-Only and Disable

Which of the following can provide information to a Palo Alto Networks firewall for the purposes of User-ID? (Select all correct answers.)

A. Network Access Control (NAC) device

B. Domain Controller

C. RIPv2

D. SSL Certificates

To allow the PAN device to resolve internal and external DNS host names for reporting and for security policies, an administrator can do the following:

A. Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, point to this proxy object for DNS resolution.

B. In the device settings define internal hosts via a static list.

C. In the device settings set the Primary DNS server to an external server and the secondary to an internal server.

D. Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, select the proxy object as the Primary DNS and create a custom security rule which references that object for

If there is an HA configuration mismatch between firewalls during peer negotiation, whichstate will the passive firewallenter?

A. INITIAL

B. NON-FUNCTIONAL

C. PASSIVE

D. ACTIVE

Which of the following describes the sequence of the Global Protect agent connecting to a Gateway?

A. The Agent connects to the Portal obtains a list of Gateways, and connects to the Gateway with the fastest SSL response time

B. The agent connects to the closest Gateway and sends the HIP report to the portal

C. The agent connects to the portal, obtains a list of gateways, and connects to the gateway with the fastest PING response time

D. The agent connects to the portal and randomly establishes a connection to the first available gateway