SSL Forward Proxy decryption is enabled on the firewall. When clients use Chrome to browse to HTTPS sites, the firewall returns the Forward Trust certificate, even when accessing websites with invalid certificates. The clients need to be presented with a browser warning error with the option to proceed to websites with invalid certificates.Which two options will satisfy this requirement? (Choose two.)
Your customer wants to implement Active/Active High Availability for their PA-5260 pair. The following conditions are true in their environment:-They are using multiple Layer 3 interfaces to process traffic.-Their routing topology requires the use of Network Address Translation policies to ensure that traffic can reach its destinations correctly.-They prefer to have the session workload distributed as evenly as possible to ensure both firewalls have lower resource utilization.-They make use of dynamic routing protocols on their virtual routers for route-based redundancy.-They chose to go with Active/Active for failover speed reasons.Which three of the following HA configurations should your customer ensure they use to meet these requirements? (Choose three.)
Your customer believes that the Panorama appliance is being overwhelmed by the logs from deployed Palo Alto Networks Next-Generation Firewalls.What CLI command can you run to determine the number of logs per second sent by each firewall?
A customer recently purchased a license for URL filtering and is having trouble activating PAN-DB. Which two commands can be used to troubleshoot this issue? (Choose two.)
What are the three predefined external dynamic lists in PAN-OS that customers receive with their content and threat updates? (Choose three.)
With its improved reliability and automation, Expedition 2 will install by using which of the following?