Which two features can be used to tag a username so that it is included in a dynamic user group?
(Choose two.)

Which two actions must an engineer take to configure SSL Forward Proxy decryption? (Choose two.)

Your company has to Active Directory domain controllers spread across multiple WAN links. All users authenticate to Active Directory Each link has substantial network bandwidth to support all mission-critical applications. The firewalls management plane is highly utilized.
Given this scenario which type of User-ID agent is considered a best practice by Palo Alto Networks?

Which three options are available when creating a security profile? (Choose three)

A network administrator configured a site-to-site VPN tunnel where the peer device will act as initiator. None of the peer addresses are known.
What can the administrator configure to establish the VPN connection?