How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

Which event will happen administrator uses an Application Override Policy?

Which two methods can be used to verify firewall connectivity to Autofocus? (Choose two. )

A session in the Traffic log is reporting the application as "incomplete" What does "incomplete" mean?