PCNSE Exam Questions

An administrator has left a firewall to use the default port for all management services. Which three functions are performed by the dataplane? (Choose three.)

A Security policy rule is configured with a Vulnerability Protection Profile and an action of `Deny". Which action will this cause configuration on the matched traffic?

If the firewall has the following link monitoring configuration, what will cause a failover?

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans. Which Security Profile type will protect against worms and t...

A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers. Which option will protect the individual servers?

Refer to the exhibit. Which will be the egress interface if the traffic's ingress interface is ethernet 1/7 sourcing from 192.168.111.3 and to the destination 10.46.41.113?

Which PAN-OS ® policy must you configure to force a user to provide additional credentials before he is allowed to access an internal application that contains highly-sensitive bus...

How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?

If an administrator does not possess a website's certificate, which SSL decryption mode will allow the Palo Alto networks NGFW to inspect when users browse to HTTP(S) websites?

Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OS ® version, and serial number?

An administrator has configured the Palo Alto Networks NGFW's management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW...

A customer wants to set up a VLAN interface for a Layer 2 Ethernet port. Which two mandatory options are used to configure a VLAN interface? (Choose two.)

Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLS services?

VPN traffic intended for an administrator's Palo Alto Networks NGFW is being maliciously intercepted and retransmitted by the interceptor. When creating a VPN tunnel, which protect...

Which item enables a firewall administrator to see details about traffic that is currently active through the NGFW?

An engineer wants to configure aggregate interfaces to increase bandwidth and redundancy between the firewall and switch. Which statement is correct about the configuration of the...

An administrator creates an SSL decryption rule decrypting traffic on all ports. The administrator also creates a Security policy rule allowing only the applications DNS, SSL, and...

Refer to the exhibit. Which certificates can be used as a Forwarded Trust certificate?

Which method does an administrator use to integrate all non-native MFA platforms in PAN-OS ® software?

Which CLI command can be used to export the tcpdump capture?

Which three authentication services can an administrator use to authenticate admins into the Palo Alto Networks NGFW without defining a corresponding admin account on the local fir...

Which method will dynamically register tags on the Palo Alto Networks NGFW?

Which feature can be configured on VM-Series firewalls?

Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

What is exchanged through the HA2 link?

View the GlobalProtect configuration screen capture. What is the purpose of this configuration?

An administrator has been asked to create 100 virtual firewalls in a local, on-premise lab environment (not in "the cloud"). Bootstrapping is the most expedient way to perform this...

Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a "No Decrypt" action? (Choose two.)

Which CLI command enables an administrator to check the CPU utilization of the dataplane?

If an administrator wants to decrypt SMTP traffic and possesses the server's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the...

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an intern...

Which three are valid configuration options in a WildFire Analysis Profile? (Choose three.)

Which DoS protection mechanism detects and prevents session exhaustion attacks?

Which processing order will be enabled when a Panorama administrator selects the setting "Objects defined in ancestors will take higher precedence?"

An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance. Which interface type and l...

An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors. H...

The firewall identifies a popular application as an unknown-tcp. Which two options are available to identify the application? (Choose two.)

An administrator has created an SSL Decryption policy rule that decrypts SSL sessions on any port. Which log entry can the administrator use to verify that sessions are being decry...

Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)

When is the content inspection performed in the packet flow process?

Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?

Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

In High Availability, which information is transferred via the HA data link?

Which three authentication factors does PAN-OS@software support for MFA? (Choose three.)

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can t...

A customer wants to combine multiple Ethernet interfaces into a single virtual interface using link aggregation. Which two formats are correct for naming aggregate interfaces? (Cho...

If a DNS sinkhole is configured, any sinkhole actions indicating a potentially infected host are recorded in which log type?

A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443. A Security policies rules allowing access from the Trust zone to...

Which three user authentication services can be modified to provide the Palo Alto Networks NGFW with both usernames and role names? (Choose three.)