What are two methods that a NGFW uses to determine if submitted credentials are valid corporate credentials? (Choose two.)

• A. Group mapping
• B. LDAP query
• C. WMI client probing
• D. Domain credential filter

A systems engineer (SE) successfully demonstrates NGFW managed by Strata Cloud Manager (SCM) to a company. In the resulting planning phase of the proof of value (POV), the CISO requests a test that shows how the security policies are either meeting, or are progressing toward meeting, industry standards such as Critical Security Controls (CSC), and how the company can verify that it is effectively utilizing the functionality purchased.
During the POV testing timeline, how should the SE verify that the POV will meet the CISO's request?

• A. Near the end, pull a Security Lifecycle Review (SLR) in the POV and create a report for the customer.
• B. At the beginning, use PANhandler golden images that are designed to align to compliance and to turning on the features for the CDSS subscription being tested.
• C. At the beginning, work with the customer to create custom dashboards and reports for any information required, so reports can be pulled as needed by the customer.
• D. Near the end, the customer pulls information from these SCM dashboards: Best Practices, CDSS Adoption, and NGFW Feature Adoption.

An existing customer wants to expand their online business into physical stores for the first time. The customer requires NGFWs at the physical store to handle SD-WAN, security, and data protection needs, while also mandating a vendor-validated deployment method. Which two steps are valid actions for a systems engineer to take? (Choose two.)

• A. Use Golden Images and Day 1 configuration to create a consistent baseline from which the customer can efficiently work.
• B. Create a bespoke deployment plan with the customer that reviews their cloud architecture, store footprint, and security requirements.
• C. Use the reference architecture "On-Premises Network Security for the Branch Deployment Guide" to achieve a desired architecture.
• D. Recommend the customer purchase Palo Alto Networks or partner-provided professional services to meet the stated requirements.

A prospective customer is concerned about stopping data exfiltration, data infiltration, and command-and- control (C2) activities over port 53.
Which subscription(s) should the systems engineer recommend?

• A. App-ID and Data Loss Prevention
• B. Threat Prevention
• C. DNS Security
• D. Advanced Threat Prevention and Advanced URL Filtering