Home

Home / Palo Alto Networks / PCNSE

Question list

List of questions

Question 1

(0)

DRAG DROP Match each type of DoS attack to an example of that type of attack.

Question 2

(0)

DRAG DROP Below are the steps in the workflow for creating a Best Practice Assessment in a firewall and Panorama configuration. Place the steps in order.

Question 3

(0)

When using certificate authentication for firewall administration, which method is used for authorization?

Question 4

(0)

A network administrator wants to use a certificate for the SSL/TLS Service Profile. Which type of certificate should the administrator use?

Question 5

(0)

Using multiple templates in a stack to manage many firewalls provides which two advantages? (Choose two.)

Question 6

(0)

A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external router using the BGP protocol. The peer relationship is not establishing. What command could

Question 7

(0)

A network security engineer must implement Quality of Service policies to ensure specific levels of delivery guarantees for various applications in the environment They want to ensure that they know

Question 8

(0)

Which statement regarding HA timer settings is true?

Question 9

(0)

When you navigate to Network: > GlobalProtect > Portals > Method section, which three options are available? (Choose three )

Question 10

(0)

An engineer must configure the Decryption Broker feature Which Decryption Broker security chain supports bi-directional traffic flow?

Open VPLUS File

Convert VPLUS to PDF

Related questions

If a URL is in multiple custom URL categories with different actions, which action will take priority?

When you navigate to Network: > GlobalProtect > Portals > Method section, which three options are available? (Choose three )

A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external router using the BGP protocol. The peer relationship is not establishing. What command could the engineer run to see the current state of the BGP state between the two devices?

Which type of policy in Palo Alto Networks firewalls can use Device-ID as a match condition?

Based on the screenshots above, and with no configuration inside the Template Stack itself, what access will the device permit on its Management port?

A firewall administrator has been tasked with ensuring that all firewalls forward System logs to Panorama. In which section is this configured?

DRAG DROP An engineer is troubleshooting traffic routing through the virtual router. The firewall uses multiple routing protocols, and the engineer is trying to determine routing priority Match the default Administrative Distances for each routing protocol.

An administrator analyzes the following portion of a VPN system log and notices the following issue "Received local id 10 10 1 4/24 type IPv4 address protocol 0 port 0, received remote id 10.1.10.4/24 type IPv4 address protocol 0 port 0." What is the cause of the issue?

Following a review of firewall logs for traffic generated by malicious activity, how can an administrator confirm that WildFire has identified a virus?

An engineer is reviewing policies after a PAN-OS upgrade What are the two differences between Highlight Unused Rules and the Rule Usage Hit counters immediately after a reboot?

Question 319 - PCNSE discussion

Report

Which two policy components are required to block traffic in real time using a dynamic user group (DUG)? (Choose two.)

A.

A Deny policy for the tagged traffic

B.

An Allow policy for the initial traffic

C.

A Decryption policy to decrypt the traffic and see the tag

D.

A Deny policy with the 'tag' App-ID to block the tagged traffic

Show Answer

asked 23/09/2024

Istvan Molnar

33 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first