ExamGecko
Login
Home / Palo Alto Networks / PCNSE / List of questions
Ask Question

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 12

Add to Whishlist

List of questions

Question 111

Report Export Collapse

During the implementation of SSL Forward Proxy decryption, an administrator imports the company's Enterprise Root CA and Intermediate CA certificates onto the firewall. The company's Root and Intermediate CA certificates are also distributed to trusted devices using Group Policy and GlobalProtect. Additional device certificates and/or Subordinate certificates requiring an Enterprise CA chain of trust are signed by the company's Intermediate CA.

Which method should the administrator use when creating Forward Trust and Forward Untrust certificates on the firewall for use with decryption?

Become a Premium Member for full access
  Unlock Premium Member

Question 112

Report Export Collapse

How would an administrator configure a Bidirectional Forwarding Detection profile for BGP after enabling the Advance Routing Engine run on PAN-OS 10.2?

Become a Premium Member for full access
  Unlock Premium Member

Question 113

Report Export Collapse

An administrator has configured a pair of firewalls using high availability in Active/Passive mode.

Path Monitoring has been enabled with a Failure Condition of "any." A path group is configured with Failure Condition of "all" and contains a destination IP of 8.8.8.8 and 4.2.2.2 with a Ping Interval of 500ms and a Ping count of 3.

Which scenario will cause the Active firewall to fail over?

Become a Premium Member for full access
  Unlock Premium Member

Question 114

Report Export Collapse

With the default TCP and UDP settings on the firewall, what will be the identified application in the following session?

Palo Alto Networks PCNSE image Question 114 54351 09232024001219000000

Become a Premium Member for full access
  Unlock Premium Member

Question 115

Report Export Collapse

Which profile generates a packet threat type found in threat logs?

Become a Premium Member for full access
  Unlock Premium Member

Question 116

Report Export Collapse

A client wants to detect the use of weak and manufacturer-default passwords for loT devices. Which option will help the customer?

Become a Premium Member for full access
  Unlock Premium Member

Question 117

Report Export Collapse

A firewall administrator notices that many Host Sweep scan attacks are being allowed through the firewall sourced from the outside zone. What should the firewall administrator do to mitigate this type of attack?

Become a Premium Member for full access
  Unlock Premium Member

Question 118

Report Export Collapse

An engineer needs to permit XML API access to a firewall for automation on a network segment that is routed through a Layer 3 subinterface on a Palo Alto Networks firewall. However, this network segment cannot access the dedicated management interface due to the Security policy.

Without changing the existing access to the management interface, how can the engineer fulfill this request?

Become a Premium Member for full access
  Unlock Premium Member

Question 119

Report Export Collapse

An engineer needs to see how many existing SSL decryption sessions are traversing a firewall What command should be used?

Become a Premium Member for full access
  Unlock Premium Member

Question 120

Report Export Collapse

Which steps should an engineer take to forward system logs to email?

Become a Premium Member for full access
  Unlock Premium Member
Total 499 questions
Go to page: of 50
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?
Phase two of a VPN will not establish a connection. The peer is using a policy-based VPN configuration. What part of the configuration should the engineer verify'?
During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be decrypted due to technical reasons. In this case, the technical reason is unsupported ciphers. Traffic to these sites will therefore be blocked if decrypted How should the engineer proceed?
If a URL is in multiple custom URL categories with different actions, which action will take priority?
What is a correct statement regarding administrative authentication using external services with a local authorization method?
You are auditing the work of a co-worker and need to verify that they have matched the Palo Alto Networks Best Practices for Anti-Spyware Profiles. For which three severity levels should single-packet captures be enabled to meet the Best Practice standard? (Choose three.)
An administrator configures a site-to-site IPsec VPN tunnel between a PA-850 and an external customer on their policy-based VPN devices. What should an administrator configure to route interesting traffic through the VPN tunnel?
A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances. Which profile should be configured in order to achieve this?
When you navigate to Network: > GlobalProtect > Portals > Method section, which three options are available? (Choose three )
When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?