ExamGecko
Login
Home / Palo Alto Networks / PCNSE / List of questions
Ask Question

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 13

Add to Whishlist

List of questions

Question 121

Report Export Collapse

A network security administrator has an environment with multiple forms of authentication. There is a network access control system in place that authenticates and restricts access for wireless users, multiple Windows domain controllers, and an MDM solution for company-provided smartphones. All of these devices have their authentication events logged.

Given the information, what is the best choice for deploying User-ID to ensure maximum coverage?

Become a Premium Member for full access
  Unlock Premium Member

Question 122

Report Export Collapse

Refer to the diagram. Users at an internal system want to ssh to the SSH server The server is configured to respond only to the ssh requests coming from IP 172.16.16.1.

In order to reach the SSH server only from the Trust zone, which Security rule and NAT rule must be configured on the firewall?

Palo Alto Networks PCNSE image Question 122 54359 09232024001219000000

Become a Premium Member for full access
  Unlock Premium Member

Question 123

Report Export Collapse

Which Panorama feature protects logs against data loss if a Panorama server fails?

Become a Premium Member for full access
  Unlock Premium Member

Question 124

Report Export Collapse

An administrator is seeing one of the firewalls in a HA active/passive pair moved to 'suspended" state due to Non-functional loop. Which three actions will help the administrator troubleshool this issue? (Choose three.)

Become a Premium Member for full access
  Unlock Premium Member

Question 125

Report Export Collapse

Which User-ID mapping method should be used in a high-security environment where all IP addressto- user mappings should always be explicitly known?

Become a Premium Member for full access
  Unlock Premium Member

Question 126

Report Export Collapse

What can be used to create dynamic address groups?

Become a Premium Member for full access
  Unlock Premium Member

Question 127

Report Export Collapse

A firewall administrator has been tasked with ensuring that all Panorama configuration is committed and pushed to the devices at the end of the day at a certain time. How can they achieve this?

Become a Premium Member for full access
  Unlock Premium Member

Question 128

Report Export Collapse

Which statement accurately describes service routes and virtual systems?

Become a Premium Member for full access
  Unlock Premium Member

Question 129

Report Export Collapse

You have upgraded Panorama to 10.2 and need to upgrade six Log Collectors. When upgrading Log Collectors to 10.2, you must do what?

Become a Premium Member for full access
  Unlock Premium Member

Question 130

Report Export Collapse

Which configuration is backed up using the Scheduled Config Export feature in Panorama?

Become a Premium Member for full access
  Unlock Premium Member
Total 499 questions
Go to page: of 50
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?
Phase two of a VPN will not establish a connection. The peer is using a policy-based VPN configuration. What part of the configuration should the engineer verify'?
During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be decrypted due to technical reasons. In this case, the technical reason is unsupported ciphers. Traffic to these sites will therefore be blocked if decrypted How should the engineer proceed?
If a URL is in multiple custom URL categories with different actions, which action will take priority?
What is a correct statement regarding administrative authentication using external services with a local authorization method?
You are auditing the work of a co-worker and need to verify that they have matched the Palo Alto Networks Best Practices for Anti-Spyware Profiles. For which three severity levels should single-packet captures be enabled to meet the Best Practice standard? (Choose three.)
An administrator configures a site-to-site IPsec VPN tunnel between a PA-850 and an external customer on their policy-based VPN devices. What should an administrator configure to route interesting traffic through the VPN tunnel?
A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances. Which profile should be configured in order to achieve this?
When you navigate to Network: > GlobalProtect > Portals > Method section, which three options are available? (Choose three )
When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?