Which three use cases are specific to Policy Optimizer? (Choose three.)

• A. Discovering applications on the network and transitions to application-based policy over time
• B. Converting broad rules based on application filters into narrow rules based on application groups
• C. Discovering 5-tuple attributes that can be simplified to 4-tuple attributes
• D. Enabling migration from port-based rules to application-based rules
• E. Automating the tagging of rules based on historical log data

The efforts of a systems engineer (SE) with an industrial mining company account have yielded interest in Palo Alto Networks as part of its effort to incorporate innovative design into operations using robots and remote-controlled vehicles in dangerous situations. A discovery call confirms that the company will receive control signals to its machines over a private mobile network using radio towers that connect to cloud-based applications that run the control programs.
Which two sets of solutions should the SE recommend?

• A. That an Advanced CDSS bundle (Advanced Threat Prevention, Advanced WildFire, and Advanced URL Filtering) be procured to ensure the design receives advanced protection.
• B. That IoT Security be included for visibility into the machines and to ensure that other devices connected to the network are identified and given risk and behavior profiles.
• C. That 5G Security be enabled and architected to ensure the cloud computing is not compromised in the commands it is sending to the onsite machines.
• D. That Cloud NGFW be included to protect the cloud-based applications from external access into the cloud service provider hosting them.

According to a customer's CIO, who is upgrading PAN-OS versions, "Finding issues and then engaging with your support people requires expertise that our operations team can better utilize elsewhere on more valuable tasks for the business." The upgrade project was initiated in a rush because the company did not have the appropriate tools to indicate that their current NGFWs were reaching capacity.
Which two actions by the Palo Alto Networks team offer a long-term solution for the customer? (Choose two.)

• A. Propose AIOps Premium within Strata Cloud Manager (SCM) to address the company's issues from within the existing technology.
• B. Inform the CIO that the new enhanced security features they will gain from the PAN-OS upgrades will fix any future problems with upgrading and capacity.
• C. Suggest the inclusion of training into the proposal so that the operations team is informed and confident in working on their firewalls.
• D. Recommend that the operations team use the free machine learning-powered AIOps for NGFW tool.

What is the minimum configuration to stop a Cobalt Strike Malleable C2 attack inline and in real time?

• A. Next-Generation CASB on PAN-OS 10.1
• B. DNS Security, Threat Prevention, and Advanced WildFire with PAN-OS 9.x
• C. Advanced Threat Prevention and PAN-OS 10.2
• D. Threat Prevention and Advanced WildFire with PAN-OS 10.0