Home / Palo Alto Networks / PCNSE

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 4

Question list

List of questions

Question 31

(0)

An engineer is in the planning stages of deploying User-ID in a diverse directory services environment. Which server OS platforms can be used for server monitoring with User-ID?

Question 32

(0)

What are three reasons for excluding a site from SSL decryption? (Choose three.)

Question 33

(0)

A user at an internal system queries the DNS server for their web server with a private IP of 10 250 241 131 in the. The DNS server returns an address of the web server's public address, 200.1.1.10.

Question 34

(0)

An administrator device-group commit push is tailing due to a new URL category How should the administrator correct this issue?

Question 35

(0)

SAML SLO is supported for which two firewall features? (Choose two.)

Question 36

(0)

The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice As part of that effort, the manager has assigne

Question 37

(0)

The following objects and policies are defined in a device group hierarchy

Question 38

(0)

An administrator is attempting to create policies tor deployment of a device group and template stack. When creating the policies, the zone drop down list does not include the required zone. What m

Question 39

(0)

An existing NGFW customer requires direct interne! access offload locally at each site and iPSec connectivity to all branches over public internet. One requirement is mat no new SD-WAN hardware be i

Question 40

(0)

Which GlobalProtect component must be configured to enable Clientless VPN?

Question 31

An engineer is in the planning stages of deploying User-ID in a diverse directory services environment.

Which server OS platforms can be used for server monitoring with User-ID?

Microsoft Terminal Server, Red Hat Linux, and Microsoft Active Directory

Microsoft Active Directory, Red Hat Linux, and Microsoft Exchange

Microsoft Exchange, Microsoft Active Directory, and Novell eDirectory

Novell eDirectory, Microsoft Terminal Server, and Microsoft Active Directory

Show Answer Comment (0)

Question 32

What are three reasons for excluding a site from SSL decryption? (Choose three.)

the website is not present in English

unsupported ciphers

certificate pinning

unsupported browser version

mutual authentication

Show Answer Comment (0)

Question 33

A user at an internal system queries the DNS server for their web server with a private IP of 10 250 241 131 in the. The DNS server returns an address of the web server's public address, 200.1.1.10.

In order to reach the web server, which security rule and U-Turn NAT rule must be configured on the firewall?

Show Answer Comment (0)

Question 34

An administrator device-group commit push is tailing due to a new URL category How should the administrator correct this issue?

verify that the URL seed Tile has been downloaded and activated on the firewall

change the new category action to alert" and push the configuration again

update the Firewall Apps and Threat version to match the version of Panorama

ensure that the firewall can communicate with the URL cloud

Show Answer Comment (0)

Question 35

SAML SLO is supported for which two firewall features? (Choose two.)

GlobalProtect Portal

CaptivePortal

WebUI

CLI

Show Answer Comment (0)

The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice As part of that effort, the manager has assigned you the Vulnerability Protection profile for the internet gateway firewall.

Which action and packet-capture setting for items of high severity and critical severity best matches Palo Alto Networks best practice?

action 'reset-both' and packet capture 'extended-capture'

action 'default' and packet capture 'single-packet'

action 'reset-both' and packet capture 'single-packet'

action 'reset-server' and packet capture 'disable'

Show Answer Comment (0)

Question 37

The following objects and policies are defined in a device group hierarchy

Address Objects-Shared Address 1-Branch Address2 Policies-Shared Polic1 l-Branch Policy1

Address Objects -Shared Addressl -Shared Address2 -Branch Addressl Policies -Shared Policyl -Shared Policy2 -Branch Policy1

Show Answer Comment (0)

Question 38

An administrator is attempting to create policies tor deployment of a device group and template stack. When creating the policies, the zone drop down list does not include the required zone.

What must the administrator do to correct this issue?

Specify the target device as the master device in the device group

Enable "Share Unused Address and Service Objects with Devices" in Panorama settings

Add the template as a reference template in the device group

Add a firewall to both the device group and the template

Show Answer Comment (0)

Question 39

An existing NGFW customer requires direct interne! access offload locally at each site and iPSec connectivity to all branches over public internet. One requirement is mat no new SD-WAN hardware be introduced to the environment.

What is the best solution for the customer?

Configure a remote network on PAN-OS

Upgrade to a PAN-OS SD-WAN subscription

Deploy Prisma SD-WAN with Prisma Access

Configure policy-based forwarding

Show Answer Comment (0)