Palo Alto Networks PCNSE Exam Practice Questions (P. 4)
- Full Access (619 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #31
A session in the Traffic log is reporting the application as `incomplete.`
What does `incomplete` mean?
What does `incomplete` mean?
- AThe three-way TCP handshake was observed, but the application could not be identified.
- BThe three-way TCP handshake did not complete.
- CThe traffic is coming across UDP, and the application could not be identified.
- DData was received but was instantly discarded because of a Deny policy was applied before App-ID could be applied.
Correct Answer:
B
B
GPT-4o - Answer
The designation `incomplete` in Palo Alto Network's Traffic logs specifically indicates that the three-way TCP handshake between devices was not successfully completed. This condition highlights a foundational communication failure, where essential TCP packets did not transmit in full, leading to unsuccessful session establishment. It’s crucial to understand that `incomplete` does not relate to post-handshake data transmission or application identification failures. Thus, monitoring these logs aids in identifying and troubleshooting preliminary connectivity issues within network operations.
Question #32
Refer to the exhibit.
An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host
A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.
Which two Security policy rules will accomplish this configuration? (Choose two.)
An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host
A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.
Which two Security policy rules will accomplish this configuration? (Choose two.)
Question #33
An administrator needs to determine why users on the trust zone cannot reach certain websites. The only information available is shown on the following image.
Which configuration change should the administrator make?
A.
B.
C.
D.
E.
Which configuration change should the administrator make?
A.
B.
C.
D.
E.
Question #34
Which three settings are defined within the Templates object of Panorama? (Choose three.)
- ASetup
- BVirtual Routers
- CInterfaces
- DSecurity
- EApplication Override
Correct Answer:
ABC
ABC
GPT-4o - Answer
Correct choices A, B, and C focus on network and device configurations. Specifically, Templates in Panorama allow for the centralized management of these settings, enabling the consistent deployment of configurations like "Setup," "Virtual Routers," and "Interfaces." Options D and E, relating to Security and Application Override respectively, fall under Device Group objects, which handle policy and object management instead.
Question #36
An administrator logs in to the Palo Alto Networks NGFW and reports that the WebUI is missing the Policies tab.
Which profile is the cause of the missing Policies tab?
Which profile is the cause of the missing Policies tab?
- AAdmin Role
- BWebUI
- CAuthentication
- DAuthorization
Correct Answer:
A
A
GPT-4o - Answer
The missing Policies tab in the Palo Alto Networks NGFW WebUI is directly related to the admin role configuration. If the appropriate permissions are not assigned within the admin role profile, certain tabs and options, like the Policies tab, will not be visible. This setup helps in customizing access and maintaining a secure and organized administration environment. Always ensure the admin roles are properly configured to grant necessary access rights to users.
Question #37
An administrator has left a firewall to use the default port for all management services.
Which three functions are performed by the dataplane? (Choose three.)
Which three functions are performed by the dataplane? (Choose three.)
- AWildFire updates
- BNAT
- CNTP
- Dantivirus
- Efile blocking
Correct Answer:
BDE
BDE
GPT-4o - Answer
Exactly! Things like updates or NTP are indeed a part of what the control plane handles, not the dataplane. The dataplane's job is more about dealing with stuff that affects actual data packets as they come and go through the firewall. This includes functions like NAT, antivirus, and file blocking. This helps ensure efficient packet processing and relevant security checks without overloading the system with non-direct data handling tasks. So, remembering this distinction can be super crucial, especially when tweaking or troubleshooting firewall settings!
All Pages