PCNSE Exam Questions

Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

Which virtual router feature determines if a specific destination IP address is reachable?

An administrator has configured a QoS policy rule and a QoS Profile that limits the maximum allowable bandwidth for the YouTube application. However, YouTube is consuming more than...

Which log file can be used to identify SSL decryption failures?

A customer wants to set up a site-to-site VPN using tunnel interfaces? Which two formats are correct for naming tunnel interfaces? (Choose two.)

Based on the following image, what is the correct path of root, intermediate, and end-user certificate?

An administrator wants a new Palo Alto Networks NGFW to obtain automatic application updates daily, so it is configured to use a scheduler for the application database. Unfortunate...

A company wants to install a PA-3060 firewall between two core switches on a VLAN trunk link. They need to assign each VLAN to its own zone and assign untagged (native) traffic to...

An engineer needs to redistribute User-ID mappings from multiple data centers. Which data flow best describes redistribution of user mappings?

Where can an administrator see both the management plane and data plane CPU utilization in the WebUI?

Which four NGFW multi-factor authentication factors are supported by PAN-OS? (Choose four.)

Which two features does PAN-OS® software use to identify applications? (Choose two.)

An administrator wants to upgrade an NGFW from PAN-OS® 7.1.2 to PAN-OS® 8.0.2. The firewall is not a part of an HA pair. What needs to be updated first?

When backing up and saving configuration files, what is achieved using only the firewall and is not available in Panorama?

Which two settings can be configured only locally on the firewall and not pushed from a Panorama template stack? (Choose two.)

An administrator just submitted a newly found piece of spyware for WildFire analysis. The spyware monitors behavior without the user's knowledge. What is the expected verdict from...

When configuring the firewall for packet capture, what are the valid stage types?

Which operation will impact performance of the management plane?

Which User-ID method maps IP addresses to usernames for users connecting through a web proxy that has already authenticated the user?

The firewall determines if a packet is the first packet of a new session or if a packet is part of an existing session using which kind of match?

Which GlobalProtect Client connect method requires the distribution and use of machine certificates?

Which feature can provide NGFWs with User-ID mapping information?

Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)

Which option enables a Palo Alto Networks NGFW administrator to schedule Application and Threat updates while applying only new content IDs to traffic?

Which is the maximum number of samples that can be submitted to WildFire per day, based on a WildFire subscription?

In which two types of deployment is active/active HA configuration supported? (Choose two.)

For which two reasons would a firewall discard a packet as part of the packet flow sequence? (Choose two.)

Which logs enable a firewall administrator to determine whether a session was decrypted?

An administrator needs to upgrade an NGFW to the most current version of PAN-OS?software. The following is occurring: - Firewall has internet connectivity through e 1/1. - Default...

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial-of-service attacks. How can the Palo Alto Ne...

An administrator deploys PA-500 NGFWs as an active/passive high availability pair. The devices are not participating in dynamic routing, and preemption is disabled. What must be ve...

A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-home or beacon out to external command-and- cont...

What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)

Which administrative authentication method supports authorization by an external service?

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)

An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewall use Layer 3 interfaces to send traffic to a single gateway IP for...

Which version of GlobalProtect supports split tunneling based on destination domain, client process, and HTTP/HTTPS video streaming application?

How does Panorama prompt VMWare NSX to quarantine an infected VM?

Which two actions would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL Forward Proxy? (Choose two.)

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the...

What is the purpose of the firewall decryption broker?

SAML SLO is supported for which two firewall features? (Choose two.)

What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

Which is not a valid reason for receiving a decrypt-cert-validation error?

In the following image from Panorama, why are some values shown in red?

The firewall is not downloading IP addresses from MineMeld. Based, on the image, what most likely is wrong?

Based on the image, what caused the commit warning?

Which three methods are supported for split tunneling in the GlobalProtect Gateway? (Choose three.)

Starting with PAN-OS version 9.1, GlobalProtect logging information is now recorded in which firewall log?