Free Download PCNSE Examp Dump: Palo Alto Networks.PCNSE.Prep4Sure.2020-02-21.92q.vcex

Question 1

Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic?

check
find
test
sim

Correct answer: C

Explanation:

Reference: http://www.shanekillen.com/2014/02/palo-alto-useful-cli-commands.html

Question 2

A customer wants to set up a VLAN interface for a Layer 2 Ethernet port.

Which two mandatory options are used to configure a VLAN interface? (Choose two.)

Virtual router
Security zone
ARP entries
Netflow Profile

Correct answer: AB

Question 3

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans.

Which Security Profile type will protect against worms and trojans?

Anti-Spyware
Instruction Prevention
File Blocking
Antivirus

Correct answer: D

Explanation:

Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/policy/security-profiles

Question 4

An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall.

Which priority is correct for the passive firewall?

0
99
1
255

Correct answer: D

Explanation:

Reference: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/high-availability/device-priority-and-preemption

Question 5

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair.

Which NGFW receives the configuration from Panorama?

The passive firewall, which then synchronizes to the active firewall
The active firewall, which then synchronizes to the passive firewall
Both the active and passive firewalls, which then synchronize with each other
Both the active and passive firewalls independently, with no synchronization afterward

Correct answer: C

Question 6

Refer to the exhibit.

An administrator cannot see any of the Traffic logs from the Palo Alto Networks NGFW on Panorama reports. The configuration problem seems to be on the firewall. Which settings, if configured incorrectly, most likely would stop only Traffic logs from being sent from the firewall to Panorama?

Correct answer: D

Question 7

Which method will dynamically register tags on the Palo Alto Networks NGFW?

Restful API or the VMware API on the firewall or on the User-ID agent or the ready-only domain controller (RODC)
Restful API or the VMware API on the firewall or on the User-ID agent
XML API or the VMware API on the firewall or on the User-ID agent or the CLI
XML API or the VM Monitoring agent on the NGFW or on the User-ID agent

Correct answer: D

Explanation:

Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/policy/register-ip-addresses-and-tags-dynamically

Question 8

To connect the Palo Alto Networks firewall to AutoFocus, which setting must be enabled?

Device>Setup>Services>AutoFocus
Device> Setup>Management >AutoFocus
AutoFocus is enabled by default on the Palo Alto Networks NGFW
Device>Setup>WildFire>AutoFocus
Device>Setup> Management> Logging and Reporting Settings

Correct answer: B

Explanation:

Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/getting-started/enable-autofocus-threat-intelligence

Question 9

An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

Security policy rule allowing SSL to the target server
Firewall connectivity to a CRL
Root certificate imported into the firewall with “Trust” enabled
Importation of a certificate from an HSM

Correct answer: A

Explanation:

Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/decryption/configure-ssl-inbound-inspection

Question 10

Which two virtualization platforms officially support the deployment of Palo Alto Networks VM-Series firewalls? (Choose two.)

Red Hat Enterprise Virtualization (RHEV)
Kernel Virtualization Module (KVM)
Boot Strap Virtualization Module (BSVM)
Microsoft Hyper-V

Correct answer: BD

Explanation:

Reference: https://www.paloaltonetworks.com/products/secure-the-network/virtualized-next-generation-firewall/vm-series

Exam	Palo Alto Networks Certified Network Security Engineer
Number	PCNSE
File Name	Palo Alto Networks.PCNSE.Prep4Sure.2020-02-21.92q.vcex
Size	4 MB
Posted	Feb 21, 2020
Download	Palo Alto Networks.PCNSE.Prep4Sure.2020-02-21.92q.vcex

Download Palo Alto Networks.PCNSE.Prep4Sure.2020-02-21.92q.vcex

File Info

How to open VCEX & EXAM Files?

Demo Questions