An administrator configures SSL Forward Proxy decryption on a Palo Alto Networks NGFW. The firewall's Forward Trust certificate needs to be distributed to all employee workstations. What is the primary reason this certificate needs to be trusted by the workstations?

• A. To enable the workstations to encrypt their traffic before sending it to the firewall.
• B. To allow the workstations to validate the certificates that the firewall generates and presents for external websites during the decryption process.
• C. To allow the workstation to access internal network resources.
• D. To authenticate the workstation to the firewall for policy enforcement.
• E. To prevent the firewall from needing to send traffic to WildFire for analysis.

Which type of certificate on a Palo Alto Networks NGFW is used to re-sign certificates presented by external web servers when performing SSL Forward Proxy decryption, and must be trusted by the clients whose traffic is being decrypted?

• A. Server Certificate
• B. Forward Trust Certificate (Root or Intermediate CA)
• C. Client Certificate
• D. Trusted Root CA Certificate
• E. SSL/TLS Service Profile Certificate

A company is experiencing poor application performance over unreliable internet links at various branch offices after transitioning away from MPLS with Prisma SD-WAN. Specifically, users report choppy voice quality (VoIP), slow loading times for internal web applications, and significant delays when saving large documents to a central file server. Assuming the links have varying degrees of latency, jitter, and packet loss, and Prisma SD-WAN is deployed with WAN optimization enabled, which of the following Prisma SD-WAN optimization features and their effects are relevant to improving the user experience for these applications? (Select all that apply)

• A. Forward Error Correction (FEC) and Packet Duplication can mitigate the impact of packet loss on VoIP and web application performance by ensuring packets arrive intact or have duplicates available.
• B. Caching frequently accessed web objects can reduce latency for internal web applications by serving content locally at the branch.
• C. Protocol Acceleration for SMB/CIFS can reduce the number of necessary request-response cycles, speeding up operations like saving large files, especially over high-latency links.
• D. Application-based Path Selection combined with real-time link monitoring can steer VoIP traffic over the link currently exhibiting the lowest jitter and packet loss.
• E. Data Reduction (Compression/Deduplication) can significantly improve VoIP quality by reducing the size of voice packets.

An enterprise utilizes a Palo Alto Networks Strata NGFW to secure its perimeter. A security policy rule permits outbound 'web-browsing' for internal users and has the following security profiles attached: Threat Prevention, Antivirus, WildFire Analysis, URL Filtering, and File Blocking. Decryption is enabled and successful for most web traffic. When a user accesses a website via HTTPS that attempts to deliver malware within a downloadable executable file, and also attempts to communicate with a known command-and-control server listed in a threat feed via another connection, which Content-ID related inspection processes are performed on this traffic after it is identified by App-ID and successfully decrypted? (Select all that apply)

• A. The File Blocking profile will determine whether the executable file type is permitted to be downloaded based on the configured policy.
• B. The downloaded executable file will be analyzed in the WildFire cloud for unknown malware characteristics.
• C. The Antivirus profile will scan the downloaded executable file content for known malware signatures.
• D. The URL Filtering profile will check the destination URL against dynamic threat intelligence feeds to identify communication with the command-and-control server.
• E. The payload of the web session will be inspected by the Threat Prevention engine for vulnerability exploits and spyware signatures.