Updated Sep-2021 Test Engine or PDF for the Palo Alto Networks PCNSE test to help you quickly prepare for the Palo Alto Networks exam!
Full PCNSE Practice Test and 337 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 37
Refer to the exhibit.
An administrator cannot see any if the Traffic logs from the Palo Alto Networks NGFW on Panorama. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?
A:
B:
C:
D:
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: B
NEW QUESTION 38
Which option enables a Palo Alto Networks NGFW administrator to schedule Application and Threat updates while applying only new content-IDs to traffic?
- A. Select disable application updates and select "Install only Threat updates"
- B. Select download-and-install
- C. Select download-only
- D. Select download-and-install, with "Disable new apps in content update" selected
Answer: B
Explanation:
Explanation
NEW QUESTION 39
A company has a policy that denies all applications it classifies as bad and permits only application it classifies as good. The firewall administrator created the following security policy on the company's firewall.
Which interface configuration will accept specific VLAN IDs?
Which two benefits are gained from having both rule 2 and rule 3 presents? (choose two)
- A. Different security profiles can be applied to traffic matching rules 2 and 3.
- B. Rule 2 and 3 apply to traffic on different ports.
- C. Separate Log Forwarding profiles can be applied to rules 2 and 3.
- D. A report can be created that identifies unclassified traffic on the network.
Answer: A,C
NEW QUESTION 40
Which two virtualization platforms officially support the deployment of Palo Alto Networks VM- Series firewalls? (Choose two.)
- A. Microsoft Hyper-V
- B. Kernel Virtualization Module (KVM)
- C. Boot Strap Virtualization Module (BSVM)
- D. Red Hat Enterprise Virtualization (RHEV)
Answer: A,B
Explanation:
Reference: https://www.paloaltonetworks.com/products/secure-the-network/virtualized-next- generation-firewall/vm-series
NEW QUESTION 41
Which data flow describes redistribution of user mappings?
- A. firewall to firewall
- B. User-ID agent to firewall
- C. Domain Controller to User-ID agent
- D. User-ID agent to Panorama
Answer: A
Explanation:
Explanation
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/configure-firewalls-to-redistribute-u
NEW QUESTION 42
Which tool provides an administrator the ability to see trends in traffic over periods of time, such as threats detected in the last 30 days?
- A. TCP Dump
- B. Session Browser
- C. Application Command Center
- D. Packet Capture
Answer: C
Explanation:
Reference:
https://live.paloaltonetworks.com/t5/Management-Articles/Tips-amp-Tricks-How-to-Use-the-Application-Comm ACC/ta-p/67342
NEW QUESTION 43
Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)
- A. The firewall's DP CPU is higher than 50%.
- B. The traffic does not match the packet capture filter.
- C. The firewall is in multi-vsys mode.
- D. The traffic is offloaded.
Answer: B,D
Explanation:
Explanation/Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/monitoring/take-packet- captures/disable-hardware-offload
NEW QUESTION 44
Which three firewall states are valid? (Choose three.)
- A. Pending
- B. Suspended
- C. Active
- D. Passive
- E. Functional
Answer: B,C,D
Explanation:
Reference:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/ha-firewall-states
NEW QUESTION 45
The certificate information displayed in the following image is for which type of certificate?
Exhibit:
- A. Forward Trust certificate
- B. Web Server certificate
- C. Public CA signed certificate
- D. Self-Signed Root CA certificate
Answer: C
NEW QUESTION 46
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?
- A. Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.
- B. When Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.
- C. An administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 8.1 state.
- D. Administrators need to manually update variable characters to those used in pre-PAN-OS 8.1.
Answer: A
NEW QUESTION 47
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?
- A. Use the debug dataplane packet-diag set capture stage management file command.
- B. Enable all four stages of traffic capture (TX, RX, DROP, Firewall).
- C. Use the tcpdump command.
- D. Use the debug dataplane packet-diag set capture stage firewall file command.
Answer: C
Explanation:
Explanation/Reference:
Reference: https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Run-a-Packet-Capture/ta- p/62390
NEW QUESTION 48
Which Palo Alto Networks VM-Series firewall is valid?
- A. VM-25
- B. VM-800
- C. VM-50
- D. VM-400
Answer: C
NEW QUESTION 49
Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?
- A. XFF headers
- B. client probing
- C. port mapping
- D. server monitoring
Answer: C
NEW QUESTION 50
Given the following table.
Which configuration change on the firewall would cause it to use 10.66.24.88 as the next hop for the
192.168.93.0/30 network?
- A. Configuring the metric for RIP to be lower than that OSPF Ext.
- B. Configuring the administrative Distance for RIP to be lower than that of OSPF Int.
- C. Configuring the metric for RIP to be higher than that of OSPF Int.
- D. Configuring the administrative Distance for RIP to be higher than that of OSPF Ext.
Answer: B
NEW QUESTION 51
Which method will dynamically register tags on the Palo Alto Networks NGFW?
- A. Restful API or the VMware API on the firewall or on the User-ID agent
- B. Restful API or the VMWare API on the firewall or on the User-ID agent or the read-only domain controller (RODC)
- C. XML API or the VM Monitoring agent on the NGFW or on the User-ID agent
- D. XML-API or the VMware API on the firewall or on the User-ID agent or the CLI
Answer: C
NEW QUESTION 52
Which method does an administrator use to integrate all non-native MFA platforms in PAN-OS® software?
- A. Okta
- B. PingID
- C. RADIUS
- D. DUO
Answer: C
NEW QUESTION 53
If the firewall is configured for credential phishing prevention using the "Domain Credential Filter" method, which login will be detected as credential theft?
- A. Marching any valid corporate username.
- B. Using the same user's corporate username and password.
- C. Mapping to the IP address of the logged-in user.
- D. First four letters of the username matching any valid corporate username.
Answer: C
Explanation:
Explanation
https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-new-features/content-inspection-features/credential-phishing-prevention Reference:
https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/content-inspection-features/credential- phishing-prevention
NEW QUESTION 54
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects. How would an administrator configure the interface to 1Gbps?
- A. set deviceconfig interface speed-duplex 1Gbps-full-duplex
- B. set deviceconfig system speed-duplex 1Gbps-full-duplex
- C. set deviceconfig system speed-duplex 1Gbps-duplex
- D. set deviceconfig Interface speed-duplex 1Gbps-half-duplex
Answer: B
Explanation:
Reference:
https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Change-the-Speed-and-Duplex-of-the-Mana Port/ta-p/59034 user@PA# set deviceconfig system speed-duplex100Mbps-full-duplex
100Mbps-full-duplex100Mbps-half-duplex 100Mbps-half-duplex10Mbps-full-duplex
10Mbps-full-duplex10Mbps-half-duplex 10Mbps-half-duplex1Gbps-full-duplex
1Gbps-full-duplex1Gbps-half-duplex 1Gbps-half-duplexauto-negotiate auto-negotiate
NEW QUESTION 55
......
Get Latest PCNSE Dumps Exam Questions: https://drive.google.com/open?id=15yA5xvpFSckQHQ3Ax1RrB6R4tUvLNyJO
Full PCNSE Practice Test and 337 unique questions with explanations waiting just for you, get it now: https://www.trainingquiz.com/PCNSE-practice-quiz.html
