PCNSE Exam Questions

Which Public Key infrastructure component is used to authenticate users for GlobalProtect when the Connect Method is set to pre-logon?

The company's Panorama server (IP 10.10.10.5) is not able to manage a firewall that was recently deployed. The firewall's dedicated management port is being used to connect to the...

Which three log-forwarding destinations require a server profile to be configured? (Choose three)

Which setting allow a DOS protection profile to limit the maximum concurrent sessions from a source IP address?

A company has a web server behind a Palo Alto Networks next-generation firewall that it wants to make accessible to the public at 1.1.1.1. The company has decided to configure a de...

Which two options are required on an M-100 appliance to configure it as a Log Collector? (Choose two)

Click the Exhibit button. An administrator has noticed a large increase in bittorrent activity. The administrator wants to determine where the traffic is going on the company. What...

Support for which authentication method was added in PAN-OS 7.0?

Refer to Exhibit. A firewall has three PBF rules and a default route with a next hop of 172.20.10.1 that is configured in the default VR. A user named Will has a PC with a 192.168....

A company has started utilizing WildFire in its network. Which three file types are supported? (Choose three.)

What is the name of the debug save file for IPSec VPN tunnels?

via Google Translator?

In order to route traffic between layer 3 interfaces on the PAN firewall you need:

Wildfire may be used for identifying which of the following types of traffic?

What does App-ID inspect to identify an application?

If malware is detected on the internet perimeter, what other places in the network might be affected?

What are the major families of file types now supported by Wildfire in PAN-OS 7.0?

Which of the following are critical features of a Next Generation Firewall that provide Breach prevention? Choose two.

True or False: One of the advantages of Single Pass Parallel Processing (SP3) is that traffic can be scanned as it crosses the firewall with minimum amount of buffering, which in t...

Which hardware platform should I consider if the customer needs at least 1 Gbps of Threat Prevention throughput and the ability to handle at least 250K sessions?

True or False: DSRI degrades the performance of a firewall?

How quickly are Wildfire updates about previously unknown files now being delivered from the cloud to customers with a WildFire subscription (as of version 6.1)?

Which of the following are valid Subscriptions for the Next Generation Platform? [Select All that apply]

Which hardware firewall platforms include both built-in front-to-back airflow and redundant power supplies?

Select all the platform components that Wildfire automatically updates after finding malicious activity in previously unknown files, URLs and APKs?

What are five benefits of Palo Alto Networks NGFWs (Next Generation Firewalls)? (Select the five correct answers.)

What are the three key components of a successful Three Tab Demo? (Select the three correct answers.)

What are the main benefits of WildFire? (Select the three correct answers.)

The automated Correlation Engine uses correlation objects to analyze the logs for patterns. When a match occurs:

Which one of these is not a factor impacting sizing decisions?

TRUE or FALSE: Many customers purchase Palo Alto Networks NGFWs (Next Generation Firewalls) just to gain previously unavailable levels of visibility into their traffic flows.

A spike in dangerous traffic is observed. Which of the following PanOS tabs would an administrator utilize to identify culpable users.

True or False: PAN-DB is a service that aligns URLs with category types and is fed to the WildFire threat cloud.

Firewall administrators cannot authenticate to a firewall GUI. Which two logs on that firewall will contain authentication-related information useful in troubleshooting this issue?...

Which option is an IPv6 routing protocol?

A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external...

A network design change requires an existing firewall to start accessing Palo Alto Updates from a data plane interface address instead of the management interface. Which configurat...

A Network Administrator wants to deploy a Large Scale VPN solution. The Network Administrator has chosen a GlobalProtect Satellite solution. This configuration needs to be deployed...

Which CLI command displays the current management plan memory utilization?

Which URL Filtering Security Profile action logs the URL Filtering category to the URL Filtering log?

Refer to the exhibit. Review the screenshots and consider the following information: - FW-1 is assigned to the FW-1_DG device group, and FW-2 is assigned to OFFICE_FW_DG. - There a...

Which three rule types are available when defining policies in Panorama? (Choose three.)

A network design calls for a "router on a stick" implementation with a PA-5060 performing inter- VLAN routing All VLAN-tagged traffic will be forwarded to the PA-5060 through a sin...

Which Panorama feature allows for logs generated by Panorama to be forwarded to an external Security Information and Event Management(SIEM) system?

Which URL Filtering Security Profile action togs the URL Filtering category to the URL Filtering log?

What are the differences between using a service versus using an application for Security Policy match?

Which authentication source requires the installation of Palo Alto Networks software, other than PAN-OS 7x, to obtain a username-to-IP-address mapping?

Several offices are connected with VPNs using static IPv4 routes. An administrator has been tasked with implementing OSPF to replace static routing. Which step is required to accom...

People are having intermittent quality issues during a live meeting via web application.

When is it necessary to activate a license when provisioning a new Palo Alto Networks firewall?