PCNSE Exam Questions

A system administrator runs a port scan using the company tool as part of vulnerability check. The administrator finds that the scan is identified as a threat and is dropped by the...

Which three items are import considerations during SD-WAN configuration planning? (Choose three.)

Which two events trigger the operation of automatic commit recovery? (Choose two.)

Panorama provides which two SD-WAN functions? (Choose two.)

Which two are valid ACC GlobalProtect Activity tab widgets? (Choose two.)

Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

SD-WAN is designed to support which two network topology types? (Choose two.)

Which option describes the operation of the automatic commit recovery feature?

Which three items are important considerations during SD-WAN configuration planning? (Choose three.)

What will be the egress interface if the traffic's ingress interface is ethernet1/6 sourcing from 192.168.111.3 and to the destination 10.46.41.113 during the time shown in the ima...

How can an administrator configure the NGFW to automatically quarantine a device using GlobalProtect?

To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, you can configure

A bootstrap USB flash drive has been prepared using a Windows workstation to load the initial configuration of a Palo Alto Networks firewall that was previously being used in a lab...

An Administrator is configuring Authentication Enforcement and they would like to create an exemption rule to exempt a specific group from authentication. Which authentication enfo...

A bootstrap USB flash drive has been prepared using a Linux workstation to load the initial configuration of a Palo Alto Networks firewall. The USB flash drive was formatted using...

To more easily reuse templates and template stacks, you can create template variables in place of firewall-specific and appliance-specific IP literals in your configurations. Which...

On the NGFW, how can you generate and block a private key from export and thus harden your security posture and prevent rogue administrators or other bad actors from misusing keys?

What is the maximum number of samples that can be submitted to WildFire manually per day?

What file type upload is supported as part of the basic WildFire service?

Updates to dynamic user group membership are automatic therefore using dynamic user groups instead of static group objects allows you to:

At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

In a Panorama template, which three types of objects are configurable? (Choose three.)

Which value in the Application column indicates UDP traffic that did not match an App-ID signature?

An engineer must configure the Decryption Broker feature. Which Decryption Broker security chain supports bi-directional traffic flow?

An organization has recently migrated its infrastructure and configuration to NGFWs, for which Panorama manages the devices. The organization is coming from a L2-L4 firewall vendor...

An engineer creates a set of rules in a Device Group (Panorama) to permit traffic to various services for a specific LDAP user group. What needs to be configured to ensure Panorama...

An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17. Which upgrade path maintains synchronization of the HA sessi...

An engineer must configure a new SSL decryption deployment. Which profile or certificate is required before any traffic that matches an SSL decryption rule is decrypted?

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

Which configuration task is best for reducing load on the management plane?

Which Panorama objects restrict administrative access to specific device-groups?

An administrator has 750 firewalls. The administrator's central-management Panorama instance deploys dynamic updates to the firewalls. The administrator notices that the dynamic up...

Which rule type controls end user SSL traffic to external websites?

Which two statements correctly identify the number of Decryption Broker security chains that are supported on a pair of decryption-forwarding interfaces? (Choose two)

An organization is building a Bootstrap Package to deploy Palo Alto Networks VM-Series firewalls into their AWS tenant. Which two statements are correct regarding the bootstrap pac...

A network administrator wants to use a certificate for the SSL/TLS Service Profile. Which type of certificate should the administrator use?

In SSL Forward Proxy decryption, which two certificates can be used for certificate signing? (Choose two.)

Use the image below If the firewall has the displayed link monitoring configuration what will cause a failover?

When overriding a template configuration locally on a firewall, what should you consider?

An engineer is designing a deployment of multi-vsys firewalls. What must be taken into consideration when designing the device group structure?

The SSL Forward Proxy decryption policy is configured. The following four certificate authority (CA) certificates are installed on the firewall. An end-user visits the untrusted we...

An engineer is planning an SSL decryption implementation. Which of the following statements is a best practice for SSL decryption?

When you configure an active/active high availability pair, which two links can you use? (Choose two.)

Which CLI command displays the physical media that are connected to ethernet1/8?

In a firewall, which three decryption methods are valid? (Choose three )

The UDP-4501 protocol-port is used between which two GlobalProtect components?

Users within an enterprise have been given laptops that are joined to the corporate domain. In some cases, IT has also deployed Linux-based OS systems with a graphical desktop. Inf...

What are three tasks that cannot be configured from Panorama by using a template stack? (Choose three)

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed each firewall must establish secure tunnels back to mu...

PBF can address which two scenarios? (Select Two)