Support for which authentication method was added in PAN-OS 8.0?

Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)

To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?

An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. The update contains an application that matches the same traffic signatures as the custom application. Which application should be used to identify traffic traversing the NGFW?

In High Availability, which information is transferred via the HA data link?