Q22. Match the logging service with its cloud provider.

Q23. The Microsoft Azure virtual network gateway supports which two site-to-site connectivity options? (Choose two.)

Q24. An Azure VNet has the IP network 10.0.0.0/16 with two subnets, 10.0.1.0/24 (used for web servers) and
10.0.2.0/24 (used for database servers). Which is a valid IP address to manage the VM-Series NGFW?

Q25. Which two cloud providers support Load Balancers as next hop configurations for outbound connections?
(Choose two.)

Q26. Palo Alto Networks recommends which two options for outbound HA design in Amazon Web Services using VM-Series NGFW? (Choose two.)

Q27. Which two statements are true about CloudFormation? (Choose two.)

Q28. Which Google Cloud Platform project shares its VPC networks with other projects?

Q29. Which two statements are true about CloudFormation? (Choose two.)

Q30. In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

Q31. Which three methods can provide application-level security for a web server instance on Amazon Web Services? (Choose three.)

Q32. Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Q33. The VM-Series integration with Amazon GuardDuty feeds malicious IP addresses to the VM-Series NGFW using XML API to populate a Dynamic Address Group within a Security policy that blocks traffic.
How does Amazon Web Services achieve this integration?

Q34. Prisma Public Cloud enables compliance monitoring and reporting by mapping which configurations to compliance standards?

Q35. Which two items are required when a VM-100 BYOL instance is upgraded to a VM-300 BYOL instance?
(Choose two.)

Q36. How can you use Prisma Public Cloud to identify Amazon EC2 instances that have been tagged as “Private?

Q37. Based on the diagram, how many routes will the virtual gateway advertise to the on-premises NGFW over the Amazon Web Services Direct Connect link?

Q38. In which two ways does Palo Alto Networks VM orchestration help service providers automatically provision security instances and policies? (Choose two.)

Q39. Which change represents a VM-Series NGFW license transfer?

Q40. An administrator has deployed an AWS transit gateway and used multiple VPC spokes to segregate a multi-tier application. The administrator also created a security VPC with multiple VM-Series NGFWs in an active/active deployment model via ECMP using Amazon Web Services VPN-based attachments.
What must be configured on the firewall to avoid asymmetric routing?

Q41. What are three examples of outbound traffic flow? (Choose three.)