Home / Palo Alto Networks / PCNSE

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 10

Question list

List of questions

Question 91

(0)

Which three items are import considerations during SD-WAN configuration planning? (Choose three.)

Question 92

(0)

An engineer needs to redistribute User-ID mappings from multiple data centers. Which data flow best describes redistribution of user mappings?

Question 93

(0)

An engineer is configuring Packet Buffer Protection on ingress zones to protect from single-session DoS attacks Which sessions does Packet Buffer Protection apply to?

Question 94

(0)

The administrator for a small company has recently enabled decryption on their Palo Alto Networks firewall using a self-signed root certificate. They have also created a Forward Trust and Forward Un

Question 95

(0)

A firewall has Security policies from three sources

Question 96

(0)

Which three use cases are valid reasons for requiring an Active/Active high availability deployment? (Choose three )

Question 97

(0)

An administrator is building Security rules within a device group to block traffic to and from malicious locations How should those rules be configured to ensure that they are evaluated with a high

Question 98

(0)

A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances. Which profile should be configured in order to achieve this?

Question 99

(0)

A company is using wireless controllers to authenticate users. Which source should be used for User- ID mappings?

Question 100

(0)

An engineer is configuring SSL Inbound Inspection for public access to a company's application. Which certificate(s) need to be installed on the firewall to ensure that inspection is performed succ

Question 91

Which three items are import considerations during SD-WAN configuration planning? (Choose three.)

link requirements

the name of the ISP

IP Addresses

branch and hub locations

Show Answer Comment (0)

Question 92

An engineer needs to redistribute User-ID mappings from multiple data centers. Which data flow best describes redistribution of user mappings?

Domain Controller to User-ID agent

User-ID agent to Panorama

User-ID agent to firewall

firewall to firewall

Show Answer Comment (0)

Question 93

An engineer is configuring Packet Buffer Protection on ingress zones to protect from single-session DoS attacks Which sessions does Packet Buffer Protection apply to?

It applies to existing sessions and is not global

It applies to new sessions and is global

It applies to new sessions and is not global

It applies to existing sessions and is global

Show Answer Comment (0)

The administrator for a small company has recently enabled decryption on their Palo Alto Networks firewall using a self-signed root certificate. They have also created a Forward Trust and Forward Untrust certificate and set them as such

The admin has not yet installed the root certificate onto client systems What effect would this have on decryption functionality?

Decryption will function and there will be no effect to end users

Decryption will not function because self-signed root certificates are not supported

Decryption will not function until the certificate is installed on client systems

Decryption will function but users will see certificate warnings for each SSL site they visit

Show Answer Comment (0)

Question 95

A firewall has Security policies from three sources

locally created policies

shared device group policies as pre-rules

the firewall's device group as post-rulesHow will the rule order populate once pushed to the firewall?

shared device group policies, firewall device group policies. local policies.

firewall device group policies, local policies. shared device group policies

shared device group policies. local policies, firewall device group policies

local policies, firewall device group policies, shared device group policies

Show Answer Comment (0)

Question 96

Which three use cases are valid reasons for requiring an Active/Active high availability deployment?

(Choose three )

The environment requires real, full-time redundancy from both firewalls at all times

The environment requires Layer 2 interfaces in the deployment

The environment requires that both firewalls maintain their own routing tables for faster dynamic routing protocol convergence

The environment requires that all configuration must be fully synchronized between both members of the HA pair

The environment requires that traffic be load-balanced across both firewalls to handle peak traffic spikes

Show Answer Comment (0)

Question 97

An administrator is building Security rules within a device group to block traffic to and from malicious locations How should those rules be configured to ensure that they are evaluated with a high priority?

Create the appropriate rules with a Block action and apply them at the top of the Default Rules

Create the appropriate rules with a Block action and apply them at the top of the Security Post- Rules.

Create the appropriate rules with a Block action and apply them at the top of the local firewall Security rules.

Create the appropriate rules with a Block action and apply them at the top of the Security Pre- Rules

Show Answer Comment (0)

Question 98

A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances. Which profile should be configured in order to achieve this?

SSH Service profile

SSL/TLS Service profile

Decryption profile

Certificate profile

Show Answer Comment (0)