A network security analyst is evaluating the impact of quantum computing and post-quantum encryption algorithms. While researching the NGFWs, the analyst finds logs in the decryption view that read, "Client only supports Post-Quantum Algorithms." Upon discussing this finding with the team, a decision is made to accept the sessions.
Which action must the analyst perform on the NGFWs to support this decision?

• A. Create a decryption profile that supports the algorithms found in the logs.
• B. Create "no decrypt" policies or decryption exclusions for the applications in scope.
• C. Enable hybrid post-quantum cryptography support for web traffic.
• D. Remove the applications from the predefined decryption exclusions global list.

In the context of Palo Alto Networks SD-WAN configuration, what is the primary purpose of a Link Tag within an SD-WAN Interface Profile??

• A. To assign a unique identifier to each physical interface
• B. To group multiple physical links for traffic distribution and path selection
• C. To specify the IP addressing scheme for SD-WAN interfaces?
• D. To define the security policies applied to SD-WAN interfaces

An analyst determines that several sanctioned, predefined applications are being intermittently blocked, even though there is an existing policy permitting them. An investigation reveals that the applications are using non-standard ports, which is causing them to be blocked. The applications are critical for business operations, and the analyst has approval to allow them. Which configuration adjustment should be implemented to ensure secure access to the applications?

• A. Clone the existing Security policy rule and include the non-standard ports under services.
• B. Disable App-ID and port filtering and rely solely on IP addresses of the applications to allow the non-standard ports.
• C. Clone the existing Security policy rule and include unknown-tcp and unknown-udp applications with service set to "any."
• D. Apply Disable Server Response Inspection (DSRI) to the existing Security policy to allow the non- standard ports.

A malware incident involving compromised internal hosts communicating with a command-and- control (C2) server has been resolved. In response, the C2 IP address is blocked. Which two actions using the Log Viewer will ensure the incident has been fully mitigated? (Choose two.)

• A. Continue to monitor for traffic going to the C2 server's IP address.
• B. Build and save a custom filter based on the affected endpoints and continue to monitor for suspicious traffic from the endpoints.
• C. Review the audit alerts and check for integrity protection alerts on the affected devices.
• D. Review the authentication alerts on the affected devices.

A team of analysts uses four NGWFs with the Precision Al Bundle, SaaS Security Inline, and Strata Cloud Manager Pro Collectively this secures all company assets across the data center and two remote sites. A security incident requires the team to review a mobile user, John Doe.
During the audit, the team prompts, "How was the application experience for John Doe over the past 60 days?" What is an expected response from Strata Copilot?

• A. The user 'John Doe' encountered a total of 219 threats in the last 3 hours."
• B. The top three threats impacting John Doe are phishing, SQL injections, and ransomware."
• C. "The average application test score for 'john doe' over the past 60 days is 37 67."
• D. "Your organization doesn't have ADEM."