File Info
| Exam | Palo Alto Networks Certified Network Security Engineer |
| Number | PCNSE |
| File Name | Palo Alto Networks.PCNSE.TestKing.2018-11-10.92q.tqb |
| Size | 2 MB |
| Posted | Nov 10, 2018 |
| Download | Palo Alto Networks.PCNSE.TestKing.2018-11-10.92q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
What are two benefits of nested device groups in Panorama? (Choose two.)
- Reuse of the existing Security policy rules and objects
- Requires configuring both function and location for every device
- All device groups inherit settings form the Shared group
- Overwrites local firewall configuration
Correct answer: BC
Question 2
Which Captive Portal mode must be configured to support MFA authentication?
- NTLM
- Redirect
- Single Sign-On
- Transparent
Correct answer: B
Explanation:
Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure-multi-factor-authentication Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure-multi-factor-authentication
Question 3
An administrator needs to implement an NGFW between their DMZ and Core network. EIGRP Routing between the two environments is required.
Which interface type would support this business requirement?
- Virtual Wire interfaces to permit EIGRP routing to remain between the Core and DMZ
- Layer 3 or Aggregate Ethernet interfaces, but configuring EIGRP on subinterfaces only
- Tunnel interfaces to terminate EIGRP routing on an IPsec tunnel (with the GlobalProtect License to support LSVPN and EIGRP protocols)
- Layer 3 interfaces, but configuring EIGRP on the attached virtual router
Correct answer: B
