Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Palo Alto Networks PCNSE

Palo Alto Networks PCNSE Exam Practice Questions (P. 5)

  • Full Access (619 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #41
Which Palo Alto Networks VM-Series firewall is valid?
  1. A
    VM-25
  2. B
    VM-800
  3. C
    VM-50
  4. D
    VM-400

Correct Answer:
C
Reference:
https://www.paloaltonetworks.com/products/secure-the-network/virtualized-next-generation-firewall/vm-series

Question #42
An administrator wants multiple web servers in the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10.1.1.22
Based on the information shown in the image, which NAT rule will forward web-browsing traffic correctly?

A.

B.

C.

D.


Correct Answer:
C

Question #43
An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW.
The update contains an application that matches the same traffic signatures as the custom application.
Which application should be used to identify traffic traversing the NGFW?
  1. A
    Custom application
  2. B
    System logs show an application error and neither signature is used.
  3. C
    Downloaded application
  4. D
    Custom and downloaded application signature files are merged and both are used

Correct Answer:
A

Question #44
Starting with PAN-OS version 9.1, GlobalProtect logging information is now recorded in which firewall log?
  1. A
    GlobalProtect
  2. B
    System
  3. C
    Authentication
  4. D
    Configuration

Correct Answer:
A
Reference:
https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/globalprotect-features/enhanced-logging-for-globalprotect.html

Question #45
Refer to the exhibit.

Which will be the egress interface if the traffic's ingress interface is ethernet1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?
  1. A
    ethernet1/6
  2. B
    ethernet1/3
  3. C
    ethernet1/7
  4. D
    ethernet1/5

Correct Answer:
D

Question #46
Which three authentication services can an administrator use to authenticate admins into the Palo Alto Networks NGFW without defining a corresponding admin account on the local firewall? (Choose three.)
  1. A
    Kerberos
  2. B
    PAP
  3. C
    SAML
  4. D
    TACACS+
  5. E
    RADIUS
  6. F
    LDAP

Correct Answer:
CDE

Question #47
Which event will happen if an administrator uses an Application Override Policy?
  1. A
    Threat-ID processing time is decreased.
  2. B
    The Palo Alto Networks NGFW stops App-ID processing at Layer 4.
  3. C
    The application name assigned to the traffic by the security rule is written to the Traffic log.
  4. D
    App-ID processing time is increased.

Correct Answer:
B
Reference:
https://live.paloaltonetworks.com/t5/Learning-Articles/Tips-amp-Tricks-How-to-Create-an-Application-Override/ta-p/65513

Question #48
Which Security policy rule will allow an admin to block facebook chat but allow Facebook in general?
  1. A
    Deny application facebook-chat before allowing application facebook
  2. B
    Deny application facebook on top
  3. C
    Allow application facebook on top
  4. D
    Allow application facebook before denying application facebook-chat

Correct Answer:
A
Reference:
https://live.paloaltonetworks.com/t5/Configuration-Articles/Failed-to-Block-Facebook-Chat-Consistently/ta-p/115673

Question #49
A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers.
Which option will protect the individual servers?
  1. A
    Enable packet buffer protection on the Zone Protection Profile.
  2. B
    Apply an Anti-Spyware Profile with DNS sinkholing.
  3. C
    Use the DNS App-ID with application-default.
  4. D
    Apply a classified DoS Protection Profile.

Correct Answer:
D

Question #50
If the firewall is configured for credential phishing prevention using the `Domain Credential Filter` method, which login will be detected as credential theft?
  1. A
    Mapping to the IP address of the logged-in user.
  2. B
    First four letters of the username matching any valid corporate username.
  3. C
    Using the same user's corporate username and password.
  4. D
    Matching any valid corporate username.

Correct Answer:
C

Previous Questions Next Questions

All Pages