PCNSC Exam Questions

View the GlobalProtect configuration screen capture. What is the purpose of this configuration?

Which feature prevents the submission of corporate login information into website forms?

A firewall engineer creates a new App-ID report under Monitor > Reports > Application Reports > New Applications to monitor new applications on the network and better assess any Se...

An administrator needs to optimize traffic to prefer business-critical applications over non-critical applications. QoS natively integrates with which feature to provide service qu...

A Palo Alto Networks NGFW just submitted a file to WildFire for analysis. Assume a 5- minute window for analysis. The firewall is configured to check for verdicts every 5 minutes....

Which three steps will reduce the CPU utilization on the management plane? (Choose three.)

If an administrator wants to decrypt SMTP traffic and possesses the saver's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the...

An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

Which feature can be configured on VM-Series firewalls?

Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a" NO Decrypt" action? (Choose two.)

In High Availability, which information is transferred via the HA data link?

Which PAN-OSֲ® policy must you configure to force a user to provide additional credentials before he is allowed to access an internal application that contains highly-sensitive bus...

An administrator has left a firewall to use default port for all management services. Which three function performed by the dataplane? (Choose three.)

An administrator has created an SSL Decryption policy rule that decrypts SSL sessions on any port. Which log entry can the administrator use to verify that sessions are being decry...

When is the content inspection performed in the packet flow process?

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration. Once deployed, each firewall must establish secure tunnels back to mu...

VPN traffic intended for an administrator's Palo Alto Networks NGfW is being maliciously intercepted and retransmitted by the interceptor. When Creating a VPN tunnel, which protect...

Which event will happen if an administrator uses an Application Override Policy?

The firewall identifies a popular application as an unknown-tcp. Which two options are available to identify the application? (Choose two.)

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)

Which two methods can be configured to validate the revocation status of a certificate? (Choose two)

Which virtual router feature determines if a specific destination IP address is reachable'?

The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router. Which two options would help t...

A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server. Which solution in PAN-OS® software would...

During the packet flow process, which two processes are performed in application identification? (Choose two.)

An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OSֲ® software, the administrator enables log forwarding from...

Which administrative authentication method supports authorization by an external service?

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can t...

An engineer is monitoring an active/active high availability (HA) firewall pair. Which HA firewall state describes the firewall that is currently processing traffic?

A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443. A Security policies rules allowing access from the Trust zone to...

Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

An administrator deploys PA-500 NGFWs as an active/passive high availability pair. The devices are not participating in dynamic routing, and preemption is disabled. What must be ve...

Which processing order will be enabled when a panorama administrator selects the setting "Objects defined in ancestors will takes higher precedence?

How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

An organization has Palo Alto Networks MGfWs that send logs to remote monitoring and security management platforms. The network team has report has excessive traffic on the corpora...

A user's traffic traversing a Palo Alto Networks NGFW sometimes can reach How can the firewall be configured automatically disable the PBF rule if the next hop goes down?

Which two methods can be used to verify firewall connectivity to Autofocus? (Choose two. )

An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same firewall. The update contain...

Which three options are supposed in HA Lite? (Choose three.)

Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)

An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall. Which priority...

When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinhole enabled, generating a traffic log. What...

A session in the Traffic log is reporting the application as "incomplete". What does "incomplete" mean?

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

Which version of Global Protect supports split tunneling based on destination domain, client process, and HTTP/HTTPs video streaming application?

Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?

An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for...

An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. Ho...

Refer to the exhibit. Which will be the egress interface if the traffic's ingress interface is ethernet 1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

An administrator sees several inbound sessions identified as unknown tcp in the Traffic logs. The administrator determines that these sessions are from external users accessing the...