Palo Alto Networks PCNSC Practice Test - Questions Answers, Page 4
List of questions
Related questions
Question 31

An administrator needs to create a new Antivirus Profile to address a virus that is spreading internally over SMB.
To create a secure posture the administrator should choose which set of actions for the SMB decoder in an Antivirus Profile?
Explanation:
To create a secure Antivirus Profile to address a virus spreading internally over SMB, the administrator should choose the following set of actions for the SMB decoder:
B . Action - Reset-Both; Wildfire Action - Reset-Both
Choosing 'Reset-Both' for both the Antivirus Action and the Wildfire Action ensures that the connection is terminated on both the client and server sides whenever a virus is detected. This action helps prevent the spread of the virus by cutting off the infected connection immediately.
Palo Alto Networks - Antivirus Profile Best Practices: https://docs.paloaltonetworks.com/best-practices
Palo Alto Networks - Creating and Configuring Antivirus Profiles: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/threat-prevention/antivirus-profiles
Question 32

Instead of disabling App-IDs regularly, a security policy rule is going to be configured to temporarily allow new App-IDs. In which two circumstances is it valid to disable App-IDs as part of content update-?
(Choose two)
Explanation:
Disabling App-IDs as part of a content update can be valid in the following circumstances:
B . When you want to immediately benefit from the latest threat prevention: Disabling certain App-IDs can help ensure that the latest threat prevention measures are applied without waiting for the App-IDs to be fully tested in a specific environment. This can be crucial in quickly addressing emerging threats.
D . When an organization operates a mission-critical network and has zero tolerance for downtime: In such environments, administrators might temporarily disable new or modified App-IDs to avoid potential disruptions caused by unverified or untested App-IDs. This ensures that the network remains stable and functional while the new App-IDs are evaluated in a controlled manner.
Palo Alto Networks - Best Practices for Application and Threat Content Updates: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/app-id/manage-app-id/application-and-threat-content-updates
Palo Alto Networks - Application and Threat Content Release Notes: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-release-notes/application-and-threat-content-release-notes
Question 33

Which CLI command should you use to verify whether all SFP SFP*, or QSFP modules are installed in a firewall?
Explanation:
To verify whether all SFP, SFP+, or QSFP modules are installed in a firewall, you should use the following CLI command:
C . show system state filter sys.s-phy*
This command provides detailed information about the physical state of the system, including the status of SFP, SFP+, and QSFP modules installed in the firewall.
Palo Alto Networks - CLI Commands for Troubleshooting Hardware Issues: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-cli-quick-start/troubleshooting-hardware-issues
Palo Alto Networks - Understanding Hardware and Interface Details via CLI: https://knowledgebase.paloaltonetworks.com
Question 34

A customer who has a multi-tenant environment needs the administrator to be restricted lo specific objects and policies in the virtual system within its tenant How can an administrators access be restricted?
Explanation:
To restrict an administrator's access to specific objects and policies in the virtual system within a multi-tenant environment, you should:
A . Define access domains for virtual systems in the environment
Access domains allow you to control administrator access to specific virtual systems, device groups, and templates. By defining access domains, you can restrict the administrator's permissions to only the relevant sections of the configuration, ensuring they can manage only the objects and policies within their assigned virtual systems.
Palo Alto Networks - Admin Role Profiles and Access Domains: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/administering-pan-os/admin-role-profiles-and-access-domains
Palo Alto Networks - Multi-Tenancy in Virtual Systems: https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/firewall-administration/multi-tenancy
Question 35

Which command would you use to view the current sessions on a Palo Alto firewall?
Question 36

Which of the following is NOT a benefit of using App-ID?
Question 37

What feature should be used to decrypt and inspect inbound SSL traffic without having to install a certificate on the client devices?
Question 38

Which GlobalProtect feature ensures that only trusted endpoints can connect to the network?
Question 39

What command can you use to check the status of GlobalProtect clients connected to the firewall?
Question 40

Which feature allows you to use multiple links simultaneously to balance the load in a Palo Alto Networks firewall?
Question