ExamGecko
Login
Home / Palo Alto Networks / PCNSE / List of questions
Ask Question

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 17

Add to Whishlist

List of questions

Question 161

Report Export Collapse

An administrator has left a firewall to use the default port for all management services. Which three functions are performed by the dataplane?

Become a Premium Member for full access
  Unlock Premium Member

Question 162

Report Export Collapse

Which two events trigger the operation of automatic commit recovery? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 163

Report Export Collapse

Panorama provides which two SD-WAN functions? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 164

Report Export Collapse

A users traffic traversing a Palo Alto networks NGFW sometimes can reach http //www company comAt other times the session times out. At other times the session times out The NGFW has beenconfigured with a PBF rule that the user traffic matches when it goes to http://www.company.comgoes to http://www company comHow can the firewall be configured to automatically disable the PBF rule if the next hop goes down?

Become a Premium Member for full access
  Unlock Premium Member

Question 165

Report Export Collapse

The Aggregate Ethernet interface is showing down on a passive PA-7050 firewall of an active/passive HA pair. The HA Passive Link State is set to "Auto" under Device > High Availability > General > Active/Passive Settings. The AE interface is configured with LACP enabled and is up only on the active firewall.

Why is the AE interface showing down on the passive firewall?

Become a Premium Member for full access
  Unlock Premium Member

Question 166

Report Export Collapse

An engineer needs to configure SSL Forward Proxy to decrypt traffic on a PA-5260. The engineer uses a forward trust certificate from the enterprise PKI that expires December 31, 2025. The validity date on the PA-generated certificate is taken from what?

Become a Premium Member for full access
  Unlock Premium Member

Question 167

Report Export Collapse

Refer to the exhibit.

Palo Alto Networks PCNSE image Question 167 54404 09232024001219000000

Based on the screenshots above what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?

Become a Premium Member for full access
  Unlock Premium Member

Question 168

Report Export Collapse

How can Panorama help with troubleshooting problems such as high CPU or resource exhaustion on a managed firewall?

Become a Premium Member for full access
  Unlock Premium Member

Question 169

Report Export Collapse

Four configuration choices are listed, and each could be used to block access to a specific URL II you configured each choice to block the same URL, then which choice would be evaluated last in the processing order to block access to the URL1?

Become a Premium Member for full access
  Unlock Premium Member

Question 170

Report Export Collapse

After configuring HA in Active/Passive mode on a pair of firewalls the administrator gets a failed commit with the following details.

Palo Alto Networks PCNSE image Question 170 54407 09232024001219000000

What are two s for this type of issue? (Choose two)

Become a Premium Member for full access
  Unlock Premium Member
Total 499 questions
Go to page: of 50
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Before an administrator of a VM-500 can enable DoS and zone protection, what actions need to be taken?
Phase two of a VPN will not establish a connection. The peer is using a policy-based VPN configuration. What part of the configuration should the engineer verify'?
During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be decrypted due to technical reasons. In this case, the technical reason is unsupported ciphers. Traffic to these sites will therefore be blocked if decrypted How should the engineer proceed?
If a URL is in multiple custom URL categories with different actions, which action will take priority?
What is a correct statement regarding administrative authentication using external services with a local authorization method?
You are auditing the work of a co-worker and need to verify that they have matched the Palo Alto Networks Best Practices for Anti-Spyware Profiles. For which three severity levels should single-packet captures be enabled to meet the Best Practice standard? (Choose three.)
An administrator configures a site-to-site IPsec VPN tunnel between a PA-850 and an external customer on their policy-based VPN devices. What should an administrator configure to route interesting traffic through the VPN tunnel?
A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances. Which profile should be configured in order to achieve this?
When you navigate to Network: > GlobalProtect > Portals > Method section, which three options are available? (Choose three )
When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?