Which two interface types can be associated to a virtual router? (Choose two.)

A customer is worried about unknown attacks, but due to privacy and regulatory issues, won't implement SSL decrypt.
How can the platform still address this customer's concern?

You have enabled the WildFire ML for PE files in the antivirus profile and have added the profile to the appropriate firewall rules. When you go to Palo Alto Networks WildFire test av file and attempt to download the test file it is allowed through. In order to verify that the machine learning is working from the command line, which command returns a valid result?

If a Palo Alto Networks Next-Generation Firewall (NGFW) already has Advanced Threat Prevention (ATP) enabled what is the throughput impact of also enabling Wildfire and Advanced URL Filtering (AURLF)?

Which two features are found in Palo Alto Networks NGFW but are absent in a legacy firewall product? (Choose two.)