PCNSE Exam Questions

During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be d...

When using certificate authentication for firewall administration, which method is used for authorization?

When you navigate to Network > GlobalProtect > Portals > Agent > (config) > App and look in the Connect Method section, which three options are available? (Choose three.)

An administrator analyzes the following portion of a VPN system log and notices the following issue: `Received local id 10.10.1.4/24 type IPv4 address protocol 0 port 0, received r...

What is considered the best practice with regards to zone protection?

An engineer wants to implement the Palo Alto Networks firewall in VWire mode on the internet gateway and wants to be sure of the functions that are supported on the vwire interface...

An administrator needs to build Security rules in a Device Group that allow traffic to specific users and groups defined in Active Directory. What must be configured in order to se...

Which three use cases are valid reasons for requiring an Active/Active high availability deployment? (Choose three )

Which protocol is supported by GlobalProtect Clientless VPN?

Cortex XDR notifies an administrator about grayware on the endpoints. There are no entnes about grayware in any of the logs of the corresponding firewall. Which setting can the adm...

What would allow a network security administrator to authenticate and identify a user with a new BYOD-type device that is not joined to the corporate domain?

Which statement is correct given the following message from the PanGPA log on the GlobalProtect app? Failed to connect to server at port:4767

Which GlobalProtect component must be configured to enable Chentless VPN?

A network security engineer must implement Quality of Service policies to ensure specific levels of delivery guarantees for various applications in the environment. ]They want to e...

Which statement regarding HA timer settings is true?

What is the best description of the HA4 Keep-Alive Threshold (ms)?

Where is information about packet buffer protection logged?

An administrator needs firewall access on a trusted interface. Which two components are required to configure certificate-based, secure authentication to the web UI? (Choose two.)

When planning to configure SSL Froward Proxy on a PA 5260, a user asks how SSL decryption can be implemented using phased approach in alignment with Palo Alto Networks best practic...

A prospect is eager to conduct a Security Lifecycle Review (SLR) with the aid of the Palo Alto Networks NGFW. Which interface type is best suited to provide the raw data for an SLR...

A user at an internal system queries the DNS server for their web server with a private IP of 10.250.241.131 in the webserver. The DNS server returns an address of the web server's...

What is the function of a service route?

An administrator allocates bandwidth to a Prisma Access Remote Networks compute location with three remote networks. What is the minimum amount of bandwidth the administrator could...

A network security engineer wants to prevent resource-consumption issues on the firewall. Which strategy is consistent with decryption best practices to ensure consistent performan...

What can you use with Global Protect to assign user-specific client certificates to each GlobalProtect user?

In the screenshot above which two pieces ot information can be determined from the ACC configuration shown? (Choose two)

An administrator needs to assign a specific DNS server to one firewall within a device group. Where would the administrator go to edit a template variable at the device level?

When configuring forward error correction (FEC) for PAN-OS SD-WAN, an administrator would turn on the feature inside which type of SD-WAN profile?

The administrator for a small company has recently enabled decryption on their Palo Alto Networks firewall using a self-signed root certificate. They have also created a Forward Tr...

An engineer is configuring Packet Buffer Protection on ingress zones to protect from single- session DoS attacks. Which sessions does Packet Buffer Protection apply to?

A user at an external system with the IP address 65.124.57.5 queries the DNS server at 4.2.2.2 172.16.15.1. In order to reach the web server, which Security rule and NAT rule must...

An administrator is building Security rules within a device group to block traffic to and from malicious locations. How should those rules be configured to ensure that they are eva...

A network security engineer is attempting to peer a virtual router on a PAN-OS firewall with an external router using the BGP protocol. The peer relationship is not establishing. W...

A network administrator troubleshoots a VPN issue and suspects an IKE Crypto mismatch between peers. Where can the administrator find the corresponding logs after running a test co...

An administrator is using Panorama to manage me and suspects an IKE Crypto mismatch between peers, from the firewalls to Panorama. However, pre-existing logs from the firewalls are...

A firewall administrator is trying to identify active routes learned via BGP in the virtual router runtime stats within the GUI. Where can they find this information?

What is the dependency for users to access services that require authentication?

SSL Forward Proxy decryption is configured but the firewall uses Untrusted-CA to sign the website https //www important-website com certificate End-users are receiving me "security...

A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While valid...

WildFire will submit for analysis blocked files that match which profile settings?

A network administrator plans a Prisma Access deployment with three service connections, each with a BGP peering to a CPE. The administrator needs to minimize the BGP configuration...

Which function is handled by the management plane (control plane) of a Palo Alto Networks firewall?

An organization wishes to roll out decryption but gets some resistance from engineering leadership regarding the guest network. What is a common obstacle for decrypting traffic fro...

A firewall has Security policies from three sources: 1. locally created policies 2. shared device group policies as pre-rules 3. the firewall's device group as post-rules How will...

An administrator wants to enable WildFire inline machine learning. Which three file types does WildFire inline ML analyze? (Choose three.)

A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances. Which profile should be configured in order to achieve this?

A company is using wireless controllers to authenticate users. Which source should be used for User-ID mappings?

An engineer is configuring SSL Inbound Inspection for public access to a company's application. Which certificate(s) need to be installed on the firewall to ensure that inspection...

A firewall administrator needs to be able to inspect inbound HTTPS traffic on servers hosted in their DMZ to prevent the hosted service from being exploited. Which combination of f...

Which two statements correctly describe Session 380280? (Choose two.)