Home / Palo Alto Networks / PCNSE

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 20

Question list

List of questions

Question 191

(0)

An engineer wants to configure aggregate interfaces to increase bandwidth and redundancy between the firewall and switch. Which statement is correct about the configuration of the interfaces assigne

Question 192

(0)

What is a key step in implementing WildFire best practices?

Question 193

(0)

An administrator is attempting to create policies for deployment of a device group and template stack. When creating the policies, the zone drop-down list does not include the required zone. What c

Question 194

(0)

Review the images. A firewall policy that permits web traffic includes the What is the result of traffic that matches the "Alert - Threats" Profile Match List?

Question 195

(0)

A system administrator runs a port scan using the company tool as part of vulnerability check. The administrator finds that the scan is identified as a threat and is dropped by the firewall. After f

Question 196

(0)

An administrator has 750 firewalls. The administrator's central-management Panorama instance deploys dynamic updates to the firewalls. The administrator notices that the dynamic updates from Panoram

Question 197

(0)

An administrator wants to enable WildFire inline machine learning. Which three file types does WildFire inline ML analyze? (Choose three.)

Question 198

(0)

An administrator wants to grant read-only access to all firewall settings, except administrator accounts, to a new-hire colleague in the IT department. Which dynamic role does the administrator ass

Question 199

(0)

Which feature checks Panorama connectivity status after a commit?

Question 200

(0)

What is the dependency for users to access services that require authentication?

Question 191

An engineer wants to configure aggregate interfaces to increase bandwidth and redundancy between the firewall and switch. Which statement is correct about the configuration of the interfaces assigned to an aggregate interface group?

They can have a different bandwidth.

They can have a different interface type such as Layer 3 or Layer 2.

They can have a different interface type from an aggregate interface group.

They can have different hardware media such as the ability to mix fiber optic and copper.

Show Answer Comment (0)

Question 192

What is a key step in implementing WildFire best practices?

In a mission-critical network, increase the WildFire size limits to the maximum value.

Configure the firewall to retrieve content updates every minute.

In a security-first network, set the WildFire size limits to the minimum value.

Ensure that a Threat Prevention subscription is active.

Show Answer Comment (0)

Question 193

An administrator is attempting to create policies for deployment of a device group and template stack. When creating the policies, the zone drop-down list does not include the required zone.

What can the administrator do to correct this issue?

Enable "Share Unused Address and Service Objects with Devices" in Panorama settings.

Add a firewall to both the device group and the template.

Specify the target device as the master device in the device group.

Add the template as a reference template in the device group.

Show Answer Comment (0)

Question 194

Review the images.

A firewall policy that permits web traffic includes the What is the result of traffic that matches the "Alert - Threats" Profile Match List?

The source address of SMTP traffic that matches a threat is automatically blocked as BadGuys for 180 minutes.

The source address of traffic that matches a threat is automatically blocked as BadGuys for 180 minutes.

The source address of traffic that matches a threat is automatically tagged as BadGuys for 180 minutes.

The source address of SMTP traffic that matches a threat is automatically tagged as BadGuys for 180 minutes.

Show Answer Comment (0)

Question 195

A system administrator runs a port scan using the company tool as part of vulnerability check. The administrator finds that the scan is identified as a threat and is dropped by the firewall. After further investigating the logs, the administrator finds that the scan is dropped in the Threat Logs.

What should the administrator do to allow the tool to scan through the firewall?

Remove the Zone Protection profile from the zone setting.

Add the tool IP address to the reconnaissance protection source address exclusion in the Zone Protection profile.

Add the tool IP address to the reconnaissance protection source address exclusion in the DoS Protection profile.

Change the TCP port scan action from Block to Alert in the Zone Protection profile.

Show Answer Comment (0)

Question 196

An administrator has 750 firewalls. The administrator's central-management Panorama instance deploys dynamic updates to the firewalls. The administrator notices that the dynamic updates from Panorama do not appear on some of the firewalls.

If Panorama pushes the configuration of a dynamic update schedule to managed firewalls, but the configuration does not appear, what is the root cause?

Panorama does not have valid licenses to push the dynamic updates.

Panorama has no connection to Palo Alto Networks update servers.

No service route is configured on the firewalls to Palo Alto Networks update servers.

Locally-defined dynamic update settings take precedence over the settings that Panorama pushed.

Show Answer Comment (0)

Question 197

An administrator wants to enable WildFire inline machine learning.

Which three file types does WildFire inline ML analyze? (Choose three.)

MS Office

ELF

APK

VBscripts

Powershell scripts

Show Answer Comment (0)

Question 198

An administrator wants to grant read-only access to all firewall settings, except administrator accounts, to a new-hire colleague in the IT department.

Which dynamic role does the administrator assign to the new-hire colleague?

Device administrator (read-only)

System administrator (read-only)

Firewall administrator (read-only)

Superuser (read-only)

Show Answer Comment (0)