File Info
| Exam | Palo Alto Networks Certified Network Security Engineer |
| Number | PCNSE |
| File Name | Palo Alto Networks.PCNSE.CertKey.2018-11-02.95q.tqb |
| Size | 2 MB |
| Posted | Nov 02, 2018 |
| Download | Palo Alto Networks.PCNSE.CertKey.2018-11-02.95q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
A session in the Traffic log is reporting the application as “incomplete.”
What does “incomplete” mean?
- The three-way TCP handshake was observed, but the application could not be identified.
- The three-way TCP handshake did not complete.
- The traffic is coming across UDP, and the application could not be identified.
- Data was received but was instantly discarded because of a Deny policy was applied before App-ID could be applied.
Correct answer: B
Question 2
An administrator is using DNAT to map two servers to a single public IP address. Traffic will be steered to the specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and HOST B (10.1.1.101) receives SSH traffic.)
Which two security policy rules will accomplish this configuration? (Choose two.)
- Untrust (Any) to Untrust (10.1.1.100), web-browsing -Allow
- Untrust (Any) to Untrust (10.1.1.101), ssh -Allow
- Untrust (Any) to DMZ (10.1.1.100), web-browsing -Allow
- Untrust (Any) to DMZ (10.1.1.100), ssh –Allow
- Untrust (Any) to DMZ (10.1.1.100.10.1.1.101), ssh, web-browsing -Allow
Correct answer: CD
Question 3
An administrator needs to determine why users on the trust zone cannot reach certain websites. The only information available is shown on the following image.
Which configuration change should the administrator make?
Correct answer: B
