Which filtering criterion is used to determine users to be included as members of a dynamic user group (DUG)?

A prospective customer was the victim of a zero-day attack that compromised specific employees, who then became unwitting attack vectors. The customer does not want that to happen again.
Which two Palo Alto Networks platform components will help this customer? (Choose two.)

Which three network events are highlighted through correlation objects as a potential security risks? (Choose three.)

What two types of certificates are used to configure SSL Forward Proxy? (hoose two.)

What are three key benefits of the Palo Alto Networks platform approach to security? (Choose three)