A.Hightlight all rules that did not immmediately match traffic.

B.Hightlight all rules that did not match traffic since the rule was created or since last reboot of the firewall

C.Allow the administrator to temporarily disable rules that do not match traffic, for testing purposes

D.Allows the administrator to troubleshoot rules when a validation error occurs at the time of commit.

A.Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, select the proxy object as the Primary DNS and create a custom security rule which references that object for

B.Create a DNS Proxy Object with a default DNS Server for external resolution and a DNS server for internal domain. Then, in the device settings, point to this proxy object for DNS resolution.

C.In the device settings define internal hosts via a static list.

D.In the device settings set the Primary DNS server to an external server and the secondary to an internal server.

A.Cisco CSR based transit lets you choose any instance size. Throughput will depend on the instance size characteristics

B.With default settings, Cisco CSR based transit can do 1.25 Gbps encrypted throughput whereas Aviatrix can do up to 70 Gbps

C.Aviatrix based transit can do 1.25 Gbps encrypted throughput whereas Cisco CSR can do up to 70 Gbps

D.Aviatrix transit architecture lets you choose any instance size. Throughput will depend on the instance size characteristics

A.An Agentless deployment of User-ID, employing only the Palo Alto Networks Firewall

B.A User-ID agent, with the "Use for NTLM Authentication" option enabled.

C.Terminal Server Agent

D.XML API for User-ID Agent

A.Layer 2

B.Virtual Wire

C.Tap

D.Layer 3