Home / Palo Alto Networks / PCNSE

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 13

Question list

List of questions

Question 121

(0)

A network security administrator has an environment with multiple forms of authentication. There is a network access control system in place that authenticates and restricts access for wireless user

Question 122

(0)

Refer to the diagram. Users at an internal system want to ssh to the SSH server The server is configured to respond only to the ssh requests coming from IP 172.16.16.1. In order to reach the SSH se

Question 123

(0)

Which Panorama feature protects logs against data loss if a Panorama server fails?

Question 124

(0)

An administrator is seeing one of the firewalls in a HA active/passive pair moved to 'suspended" state due to Non-functional loop. Which three actions will help the administrator troubleshool this i

Question 125

(0)

Which User-ID mapping method should be used in a high-security environment where all IP addressto- user mappings should always be explicitly known?

Question 126

(0)

What can be used to create dynamic address groups?

Question 127

(0)

A firewall administrator has been tasked with ensuring that all Panorama configuration is committed and pushed to the devices at the end of the day at a certain time. How can they achieve this?

Question 128

(0)

Which statement accurately describes service routes and virtual systems?

Question 129

(0)

You have upgraded Panorama to 10.2 and need to upgrade six Log Collectors. When upgrading Log Collectors to 10.2, you must do what?

Question 130

(0)

Which configuration is backed up using the Scheduled Config Export feature in Panorama?

Question 121

A network security administrator has an environment with multiple forms of authentication. There is a network access control system in place that authenticates and restricts access for wireless users, multiple Windows domain controllers, and an MDM solution for company-provided smartphones. All of these devices have their authentication events logged.

Given the information, what is the best choice for deploying User-ID to ensure maximum coverage?

Syslog listener

agentless User-ID with redistribution

standalone User-ID agent

captive portal

Show Answer Comment (0)

Question 122

Refer to the diagram. Users at an internal system want to ssh to the SSH server The server is configured to respond only to the ssh requests coming from IP 172.16.16.1.

In order to reach the SSH server only from the Trust zone, which Security rule and NAT rule must be configured on the firewall?

Show Answer Comment (0)

Question 123

Which Panorama feature protects logs against data loss if a Panorama server fails?

Panorama HA automatically ensures that no logs are lost if a server fails inside the HA Cluster.

Panorama Collector Group with Log Redundancy ensures that no logs are lost if a server fails inside the Collector Group.

Panorama HA with Log Redundancy ensures that no logs are lost if a server fails inside the HA Cluster.

Panorama Collector Group automatically ensures that no logs are lost if a server fails inside the Collector Group

Show Answer Comment (0)

Question 124

An administrator is seeing one of the firewalls in a HA active/passive pair moved to 'suspended" state due to Non-functional loop. Which three actions will help the administrator troubleshool this issue? (Choose three.)

Use the CLI command show high-availability flap-statistics

Check the HA Link Monitoring interface cables.

Check the High Availability > Link and Path Monitoring settings.

Check High Availability > Active/Passive Settings > Passive Link State

Check the High Availability > HA Communications > Packet Forwarding settings.

Show Answer Comment (0)

Question 125

Which User-ID mapping method should be used in a high-security environment where all IP addressto- user mappings should always be explicitly known?

PAN-OS integrated User-ID agent

GlobalProtect

Windows-based User-ID agent

LDAP Server Profile configuration

Show Answer Comment (0)

Question 126

What can be used to create dynamic address groups?

dynamic address

region objects

Question 127

A firewall administrator has been tasked with ensuring that all Panorama configuration is committed and pushed to the devices at the end of the day at a certain time. How can they achieve this?

Use the Scheduled Config Export to schedule Commit to Panorama and also Push to Devices.

Use the Scheduled Config Push to schedule Push lo Devices and separately schedule an API call to commit all Panorama changes.

Use the Scheduled Config Export to schedule Push to Devices and separately schedule an API call to commit all Panorama changes.

Use the Scheduled Config Push to schedule Commit to Panorama and also Push to Devices.

Show Answer Comment (0)

Question 128

Which statement accurately describes service routes and virtual systems?

Virtual systems that do not have specific service routes configured inherit the global service and service route settings for the firewall.

Virtual systems can only use one interface for all global service and service routes of the firewall.

Virtual systems cannot have dedicated service routes configured; and virtual systems always use the global service and service route settings for the firewall.

The interface must be used for traffic to the required external services.

Show Answer Comment (0)