PCNSE Exam Questions

A network security engineer configured IP multicast in the virtual router to support a new application. Users in different network segments are reporting that they are unable to ac...

Given the Sample Log Forwarding Profile shown, which two statements are true? (Choose two.)

Based on the screenshots above, and with no configuration inside the Template Stack itself, what access will the device permit on its Management port?

An engineer is attempting to resolve an issue with slow traffic. Which PAN-OS feature can be used to prioritize certain network traffic?

An auditor is evaluating the configuration of Panorama and notices a discrepancy between the Panorama template and the local firewall configuration. When overriding the firewall co...

An engineer troubleshooting a VPN issue needs to manually initiate a VPN tunnel from the CLI. Which CLI command can the engineer use?

An engineer decides to use Panorama to upgrade devices to PAN-OS 10.2. Which three platforms support PAN-OS 10.2? (Choose three.)

As a best practice, logging at session start should be used in which case?

What must be configured to apply tags automatically to User-ID logs?

The profile is configured to provide granular defense against targeted flood attacks for specific critical systems that are accessed by users from the internet. Which profile is th...

Which states will a pair of firewalls be in if their HA Group ID is mismatched?

An engineer troubleshooting a site-to-site VPN finds a Security policy dropping the peer's IKE traffic at the edge firewall. Both VPN peers are behind a NAT, and NAT-T is enabled....

An engineer is tasked with deploying SSL Forward Proxy decryption for their organization. What should they review with their leadership before implementation?

A network security engineer needs to enable Zone Protection in an environment that makes use of Cisco TrustSec Layer 2 protections. What should the engineer configure within a Zone...

How should an administrator enable the Advance Routing Engine on a Palo Alto Networks firewall?

An administrator wants to enable Palo Alto Networks cloud services for Device Telemetry and IoT. Which type of certificate must be installed?

Which Palo Alto Networks tool provides configuration heat map displays for security controls?

A company has configured a URL Filtering profile with override action on their firewall. Which two profiles are needed to complete the configuration? (Choose two.)

Which three authentication types can be used to authenticate users? (Choose three.)

A network administrator wants to deploy SSL Forward Proxy decryption. What two attributes should a forward trust certificate have? (Choose two.)

An administrator is assisting a security engineering team with a decryption rollout for inbound and forward proxy traffic. Incorrect firewall sizing is preventing the team from dec...

What is the best description of the Cluster Synchronization Timeout (min)?

Which two policy components are required to block traffic in real time using a dynamic user group (DUG)? (Choose two.)

An administrator is receiving complaints about application performance degradation. After checking the ACC, the administrator observes that there is an excessive amount of SSL traf...

An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same firewall. The update contain...

Users have reported an issue when they are trying to access a server on your network. The requests aren't taking the expected route. You discover that there are two different stati...

A company has configured GlobalProtect to allow their users to work from home. A decrease in performance for remote workers has been reported during peak-use hours. Which two steps...

Where can an administrator see both the management-plane and data-plane CPU utilization in the WebUI?

An administrator wants to perform HIP checks on the endpoints to ensure their security posture. Which license is required on all Palo Alto Networks next-generation firewalls that w...

A network security administrator wants to configure SSL inbound inspection. Which three components are necessary for inspecting the HTTPS traffic as it enters the firewall? (Choose...

You have been asked to implement GlobalProtect for your organization. You have decided on https://gp.mycompany.com for your Portal, and have received the certificate and key. Where...

An engineer has been asked to limit which routes are shared by running two different areas within an OSPF implementation. However, the devices share a common link for communication...

An administrator is configuring a Panorama device group. Which two objects are configurable? (Choose two.)

An administrator wants to use LDAP, TACACS+, and Kerberos as external authentication services for authenticating users. What should the administrator be aware of regarding the auth...

An administrator has two pairs of firewalls within the same subnet. Both pairs of firewalls have been configured to use High Availability mode with Active/Passive. The ARP tables f...

The same route appears in the routing table three times using three different protocols. Which mechanism determines how the firewall chooses which route to use?

An engineer has discovered that certain real-time traffic is being treated as best effort due to it exceeding defined bandwidth. Which QoS setting should the engineer adjust?

A Security policy rule is configured with a Vulnerability Protection Profile and an action of "Deny". Which action will this configuration cause on the matched traffic?

Which feature detects the submission of corporate login information into website forms?

Which three firewall multi-factor authentication factors are supported by PAN-OS? (Choose three.)

An administrator needs to identify which NAT policy is being used for internet traffic. From the GUI of the firewall, how can the administrator identify which NAT policy is in use...

Which three external services perform both authentication and authorization for administration of firewalls? (Choose three.)

A firewall administrator has been tasked with ensuring that all firewalls forward System logs to Panorama. In which section is this configured?

A customer would like to support Apple Bonjour in their environment for ease of configuration. Which type of interface in needed on their PA-3200 Series firewall to enable Bonjour...

An engineer is bootstrapping a VM-Series Firewall. Other than the /config folder, which three directories are mandatory as part of the bootstrap package directory structure? (Choos...

A company requires the firewall to block expired certificates issued by internet-hosted websites. The company plans to implement decryption in the future, but it does not perform S...

A company is looking to increase redundancy in their network. Which interface type could help accomplish this?

An auditor has requested that roles and responsibilities be split inside the security team. Group A will manage templates, and Group B will manage device groups inside Panorama. Wh...

An engineer is deploying VoIP and needs to ensure that voice traffic is treated with the highest priority on the network. Which QoS priority should be assigned to such an applicati...

A network security administrator wants to enable Packet-Based Attack Protection in a Zone Protection profile. What are two valid ways to enable Packet-Based Attack Protection? (Cho...