Home / Palo Alto Networks / PCNSE

Question list

List of questions

Question 1

(0)

DRAG DROP Match each type of DoS attack to an example of that type of attack.

Question 2

(0)

DRAG DROP Below are the steps in the workflow for creating a Best Practice Assessment in a firewall and Panorama configuration. Place the steps in order.

Question 3

(0)

When using certificate authentication for firewall administration, which method is used for authorization?

Question 4

(0)

A network administrator wants to use a certificate for the SSL/TLS Service Profile. Which type of certificate should the administrator use?

Question 5

(0)

Using multiple templates in a stack to manage many firewalls provides which two advantages? (Choose two.)

Question 6

(0)

A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external router using the BGP protocol. The peer relationship is not establishing. What command could

Question 7

(0)

A network security engineer must implement Quality of Service policies to ensure specific levels of delivery guarantees for various applications in the environment They want to ensure that they know

Question 8

(0)

Which statement regarding HA timer settings is true?

Question 9

(0)

When you navigate to Network: > GlobalProtect > Portals > Method section, which three options are available? (Choose three )

Question 10

(0)

An engineer must configure the Decryption Broker feature Which Decryption Broker security chain supports bi-directional traffic flow?

Question 270 - PCNSE discussion

The NAT rule destination zone should be set to Outside because that is the zone where the post-NAT IP address of the server (192.168.10.10) belongs. The destination zone of a NAT rule is the zone where the translated IP address resides.

Option A is incorrect because None is not a valid zone for a NAT rule. Option C is incorrect because DMZ is the zone where the pre-NAT IP address of the server (153.6 12.10) belongs, not the post-NAT IP address. Option D is incorrect because Inside is not a zone that is configured on the firewall.

An administrator is troubleshooting why video traffic is not being properly classified.

If this traffic does not match any QoS classes, what default class is assigned?