Home / Palo Alto Networks / PCNSE

Palo Alto Networks PCNSE Practice Test - Questions Answers, Page 42

Question list

List of questions

Question 411

(0)

Which interface type should a firewall administrator configure as an upstream to the ingress trusted interface when configuring transparent web proxy on a Palo Alto Networks firewall?

Question 412

(0)

Refer to the exhibit. A security engineer has configured a GlobalProtect portal agent with four gateways Which GlobalProtect Gateway will users connect to based on the chart provided?

Question 413

(0)

A company wants to deploy IPv6 on its network which requires that all company Palo Alto Networks firewalls process IPv6 traffic and to be configured with IPv6 addresses. Which consideration should t

Question 414

(0)

Which conditions must be met when provisioning a high availability (HA) cluster? (Choose two.)

Question 415

(0)

A firewall engineer is tasked with defining signatures for a custom application. Which two sources can the engineer use to gather information about the application patterns'? (Choose two.)

Question 416

(0)

A firewall administrator has confirm reports of a website is not displaying as expected, and wants to ensure that decryption is not causing the issue. Which three methods can the administrator use t

Question 417

(0)

An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an interal syslog server. Where can the firewall enginee

Question 418

(0)

A threat intelligence team has requested more than a dozen Short signatures to be deployed on all perimeter Palo Alto Networks firewalls. How does the firewall engineer fulfill this request with the

Question 419

(0)

A firewall administrator is changing a packet capture filter to troubleshoot a specific traffic flow Upon opening the newly created packet capture, the administrator still sees traffic for the previ

Question 420

(0)

An administrator is informed that the engineer who previously managed all the VPNs has left the company. According to company policies the administrator must update all the IPSec VPNs with new pre-s

Question 411

Which interface type should a firewall administrator configure as an upstream to the ingress trusted interface when configuring transparent web proxy on a Palo Alto Networks firewall?

Tunnel

Ethernet

VLAN

Lookback

Show Answer Comment (0)

Question 412

Refer to the exhibit.

A security engineer has configured a GlobalProtect portal agent with four gateways Which GlobalProtect Gateway will users connect to based on the chart provided?

South

West

East

Central

Show Answer Comment (0)

A company wants to deploy IPv6 on its network which requires that all company Palo Alto Networks firewalls process IPv6 traffic and to be configured with IPv6 addresses. Which consideration should the engineers take into account when planning to enable IPv6?

Device > Setup Settings Do not enable on each interface

Network > Zone Settings Do not enable on each interface

Network > Zone Settings Enable on each interface

Device > Setup Settings Enable on each interface

Show Answer Comment (0)

Question 414

Which conditions must be met when provisioning a high availability (HA) cluster? (Choose two.)

HA cluster members must share the same zone names.

Dedicated HA communication interfaces for the cluster must be used over HSCI interfaces

Panorama must be used to manage HA cluster members.

HA cluster members must be the same firewall model and run the same PAN-OS version.

Show Answer Comment (0)

Question 415

A firewall engineer is tasked with defining signatures for a custom application. Which two sources can the engineer use to gather information about the application patterns'? (Choose two.)

Traffic logs

Data filtering logs

Policy Optimizer

Wireshark

Show Answer Comment (0)

Question 416

A firewall administrator has confirm reports of a website is not displaying as expected, and wants to ensure that decryption is not causing the issue. Which three methods can the administrator use to determine if decryption is causing the website to fail? (Choose three.)

Disable SSL handshake logging

Investigate decryption logs of the specific traffic to determine reasons for failure.

Temporarily disable SSL decryption for all websites to troubleshoot the issue

Create a policy-based 'No Decrypt' rule in the decryption policy to include specific traffic from decryption.

Move the policy with action decrypt to the top of the decryption policy rulebase.

Show Answer Comment (0)

Question 417

An internal audit team has requested additional information to be included inside traffic logs forwarded from Palo Alto Networks firewalls to an interal syslog server. Where can the firewall engineer define the data to be added into each forwarded log?

Data Patterns within Objects > Custom Objects

Custom Log Format within Device Server Profiles> Syslog

Built-in Actions within Objects > Log Forwarding Profile

Logging and Reporting Settings within Device > Setup > Management

Show Answer Comment (0)

Question 418

A threat intelligence team has requested more than a dozen Short signatures to be deployed on all perimeter Palo Alto Networks firewalls. How does the firewall engineer fulfill this request with the least time to implement?

Use Expedition to create custom vulnerability signatures, deploy them to Panorama using API and push them to the firewalls.

Create custom vulnerability signatures manually on one firewall export them, and then import them to the rest of the firewalls

Use Panorama IPs Signature Converter to create custom vulnerability signatures, and push them to the firewalls.

Create custom vulnerability signatures manually in Panorama, and push them to the firewalls

Show Answer Comment (0)

Question 419

A firewall administrator is changing a packet capture filter to troubleshoot a specific traffic flow Upon opening the newly created packet capture, the administrator still sees traffic for the previous fitter What can the administrator do to limit the captured traffic to the newly configured filter?

Command line > debug dataplane packet-diag clear filter-marked-session all

In the GLH under Monitor > Packet Capture > Manage Filters under Ingress Interface select an interface

Command line> debug dataplane packet-diag clear filter all

In the GUI under Monitor > Packet Capture > Manage Filters under the Non-IP field, select 'exclude'

Show Answer Comment (0)

Question 420

An administrator is informed that the engineer who previously managed all the VPNs has left the company. According to company policies the administrator must update all the IPSec VPNs with new pre-shared keys Where are the pre-shared keys located on the firewall?

Network/lPSec Tunnels

Network/Network Profiles/IKE Gateways

Network/Network ProfilesTlPSec Crypto

Network/Network Profiles/IKE Crypto

Show Answer Comment (0)

Total 426 questions