File Info
| Exam | Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 9-0 |
| Number | PCNSE9 |
| File Name | Palo Alto Networks.PCNSE9.CertDumps.2020-05-29.20q.tqb |
| Size | 1000 KB |
| Posted | May 29, 2020 |
| Download | Palo Alto Networks.PCNSE9.CertDumps.2020-05-29.20q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which two actions would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL Forward Proxy? (Choose two.)
- Create a no-decrypt Decryption Policy rule.
- Configure an EDL to pull IP addresses of known sites resolved from a CRL.
- Create a Dynamic Address Group for untrusted sites
- Create a Security Policy rule with vulnerability Security Profile attached.
- Enable the "Block sessions with untrusted issuers" setting.
Correct answer: AD
Question 2
Which two features does PAN-OS® software use to identify applications? (Choose two)
- port number
- session number
- transaction characteristics
- application layer payload
Correct answer: CD
Explanation:
https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/app-id/application-levelgateways# https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/app-id/application-levelgateways#
Question 3
The certificate information displayed in the following image is for which type of certificate?
Exhibit:
- Forward Trust certificate
- Self-Signed Root CA certificate
- Web Server certificate
- Public CA signed certificate
Correct answer: B
