Prisma SD-WAN leverages application identification for intelligent traffic steering and optimization. How does the combination of App-ID and WAN optimization features in Prisma SD-WAN enhance application performance compared to traditional, port-based WAN optimization solutions?

• A. It ensures that only traffic using standard, well-known ports (like 80, 443) receives optimization, ignoring traffic on non-standard ports.
• B. It allows the SD-WAN appliance to apply the same universal optimization techniques (like basic compression) to all traffic equally, simplifying configuration.
• C. It primarily helps in blocking malicious applications, with optimization being a secondary, unrelated function.
• D. It offloads the App-ID processing entirely to the central Panorama appliance, freeing up local SD-WAN appliance resources for optimization.
• E. It enables the SD-WAN appliance to identify the specific application (e.g., SharePoint, Oracle, Zoom) and apply optimization techniques and path selection policies specifically tailored to that application's requirements and sensitivity to latency, jitter, and bandwidth.

A security administrator is configuring a File Blocking profile to prevent the download of executable files (.exe, .dll) and encrypted archives (.zip, .rar) from the internet. What types of criteria and actions are typically configured within a File Blocking profile rule?

• A. File Type, Direction (upload/download), Action (block, alert, continue, continue-and-forward)
• B. Data Pattern, Confidence Level
• C. URL Category, Website Reputation
• D. Vulnerability Severity, Signature ID
• E. Source User, Destination User, Application

A large enterprise is migrating some internal applications to a cloud-based Software-as-a-Service (SaaS) model and implementing a SASE architecture leveraging Palo Alto Networks Prisma Access. They are encountering issues with the correct identification and enforcement of policies for a specific custom internal web application that now runs on a standard HTTPS port (443) alongside other legitimate SaaS traffic. The security team needs to ensure this custom application is identified separately from general 'web-browsing' and enforce specific QOS and security profiles on it.

• A. Modify the default 'web-browsing' application signature to exclude traffic destined for the specific IP address/FQDN of the custom application.
• B. Rely on Content-ID to identify the specific application content and apply policies based on content signatures instead of App-ID.
• C. Configure a URL Filtering profile to block access to the custom application's URL, then allow it in a separate rule with the desired profiles.
• D. Create a custom application signature using App-ID based on unique characteristics of the application's payload or behavior, then create a security policy rule matching this custom App-ID.
• E. Deploy a separate, dedicated Strata NGFW appliance specifically for this custom application traffic before it reaches Prisma Access.

An organization manages its Palo Alto Networks firewalls using Panoram
a. They want to ensure consistent security enforcement across all managed devices by using shared security profiles configured in Panorama. They receive a report indicating that a specific Anti-Spyware profile attached to a critical Security Policy rule is configured to 'Alert' instead of 'Block' for medium and high severity signatures. How would an administrator typically locate and modify this shared Anti-Spyware profile using Panorama, and what is the impact of the change after committing?

• A. Locate the Anti-Spyware profile under Panorama > Policies > Security, modify the actions for medium/high severity signatures to 'Block', and commit the changes to Panorama, which automatically pushes to managed devices.
• B. Modifying a shared profile in Panorama requires a complete reboot of all managed firewalls for the changes to take effect.
• C. The change only affects new policies created after the modification; existing policies retain the old profile settings.
• D. Locate the Anti-Spyware profile under Panorama > Objects > Security Profiles > Anti-Spyware, modify the actions for medium/high severity signatures to 'Block', and push the changes from Panorama to the relevant Device Groups and firewalls.
• E. Access each individual firewall's web interface, locate the Anti-Spyware profile under Objects > Security Profiles, modify the actions, and commit the change on each firewall.