PCNSC Exam Questions

Refer to the exhibit. Which will be the egress interface if the traffic's ingress interface is ethernet 1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

An administrator sees several inbound sessions identified as unknown tcp in the Traffic logs. The administrator determines that these sessions are from external users accessing the...

An administrator has enabled OSPF on a virtual router on the NGFW. OSPF is not adding new routes to the virtual router. Which two options enable the administrator to troubleshoot t...

Which two options prevents the firewall from capturing traffic passing through it? (Choose two.)

Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)

How does Panorama prompt VMWare NSX to quarantine an infected VM?

Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

Which method will dynamically register tags on the Palo Alto Networks NGFW?

A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation. Which two formats are correct for naming aggregate interlaces? (Cho...

Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OSֲ® version, and serial number?

An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair. Which NGFW receives the configuration from panorama?

What is exchanged through the HA2 link?

A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny". Which action will this configuration cause on the matched traffic?

Which DoS protection mechanism detects and prevents session exhaustion attacks?

An administrator wants multiple web servers in the DMZ to receive connections initiated from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the...

A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-number or bacon out to eternal command-and-contr...

An administrator has users accessing network resources through Citrix XenApp 7.x. Which User- ID mapping solution will map multiple mat who using Citrix to connect to the network a...

A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects. How would an administrator configure the interface to 1...

Which Captive Portal mode must be configured to support MFA authentication?

Which three authentication factors does PAN-OSֲ® software support for MFA? (Choose three.)

An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?

What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

If the firewall is configured for credential phishing prevention using the "Domain Credential Filter" method, which login will be detected as credential theft?

What are two benefits of nested device groups in panorama? (Choose two )