Which five Zero Trust concepts does a Palo Alto Networks firewall apply to achieve an integrated approach to prevent threats? (Choose five.)

User identification (User-ID) is a core Zero Trust principle, ensuring that access decisions are based on the authenticated identity of the user, a capability provided by Palo Alto firewalls.

"Filtration protection" is a generic term and not a specific, recognized Zero Trust concept or a distinct security feature in the context of Palo Alto Networks' threat prevention suite.

Vulnerability protection, via Intrusion Prevention System (IPS), prevents exploits against known vulnerabilities, aligning with the Zero Trust concept of minimizing attack surface and preventing unauthorized actions.

Antivirus scanning is crucial for preventing malware infections, enforcing the Zero Trust principle of verifying all traffic for threats before allowing access.

Application identification (App-ID) allows the firewall to identify and control applications regardless of port, providing granular control essential for a Zero Trust model.

Anti-spyware protection prevents and detects spyware, further enforcing the Zero Trust principle of continuous monitoring and threat prevention.