PCNSE Exam Questions

Refer to the image. An administrator is tasked with correcting an NTP service configuration for firewalls that cannot use the Global template NTP servers. The administrator needs t...

While troubleshooting an SSL Forward Proxy decryption issue, which PAN-OS CLI command would you use to check the details of the end entity certificate that is signed by the Forward...

Which action disables Zero Touch Provisioning (ZTP) functionality on a ZTP firewall during the onboarding process?

In URL filtering, which component matches URL patterns?

In a template, you can configure which two objects? (Choose two.)

An organization's administrator has the funds available to purchase more firewalls to increase the organization's security posture. The partner SE recommends placing the firewalls...

An administrator needs to validate that policies that will be deployed will match the appropriate rules in the device-group hierarchy. Which tool can the administrator use to revie...

What is a key step in implementing WildFire best practices?

What happens when an A/P firewall cluster synchronizes IPsec tunnel security associations (SAs)?

A security engineer needs to mitigate packet floods that occur on a set of servers behind the internet facing interface of the firewall. Which Security Profile should be applied to...

What are three reasons why an installed session can be identified with the "application incomplete" tag? (Choose three.)

Which three statements correctly describe Session 380280? (Choose three.)

An administrator's device-group commit push is failing due to a new URL category. How should the administrator correct this issue?

A security engineer needs firewall management access on a trusted interface. Which three settings are required on an SSL/TLS Service Profile to provide secure Web Ul authentication...

Which type of interface does a firewall use to forward decrypted traffic to a security chain for inspection?

Which benefit do policy rule UUIDs provide?

What are two valid deployment options for Decryption Broker? (Choose two)

An administrator needs to evaluate a recent policy change that was committed and pushed to a firewall device group. How should the administrator identify the configuration changes?

Which two statements are true about DoS Protection and Zone Protection Profiles? (Choose two).

Which two statements are true for the DNS Security service? (Choose two.)

An engineer is creating a security policy based on Dynamic User Groups (DUG) What benefit does this provide?

What happens, by default, when the GlobalProtect app fails to establish an IPSec tunnel to the GlobalProtect gateway?

A standalone firewall with local objects and policies needs to be migrated into Panorama. What procedure should you use so Panorama is fully managing the firewall?

You are auditing the work of a co-worker and need to verify that they have matched the Palo Alto Networks Best Practices for Anti-Spyware Profiles. For Which three severity levels...

In a security-first network, what is the recommended threshold value for apps and threats to be dynamically updated?

Refer to the exhibit. Using the above screenshot of the ACC, what is the best method to set a global filter, narrow down Blocked User Activity, and locate the user(s) that could be...

To support a new compliance requirement, your company requires positive username attribution of every IP address used by wireless devices. You must collect IP address-to-username m...

An administrator has configured PAN-OS SD-WAN and has received a request to find out the reason for a session failover for a session that has already ended. Where would you find th...

What are two best practices for incorporating new and modified App-IDs? (Choose two.)

What type of address object would be useful for internal devices where the addressing structure assigns meaning to certain bits in the address, as illustrated in the diagram?

Which statement is true regarding a Best Practice Assessment?

An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables log forwarding from t...

The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice. As part of that effort, the...

When deploying PAN-OS SD-WAN, which routing protocol can you use to build a routing overlay?

A network-security engineer attempted to configure a bootstrap package on Microsoft Azure, but the virtual machine provisioning process failed. In reviewing the bootstrap package,...

A superuser is tasked with creating administrator accounts for three contractors. For compliance purposes, all three contractors will be working with different device-groups in the...

Based on the graphic, which statement accurately describes the output shown in the Server Monitoring panel?

An engineer was tasked to simplify configuration of multiple firewalls with a specific set of configurations shared across all devices. Which two advantages would be gained by usin...

Refer to the diagram. An administrator needs to create an address object that will be useable by the NYC, MA, CA and WA device groups. Where will the object need to be created with...

You need to allow users to access the office-suite applications of their choice. How should you configure the firewall to allow access to any office-suite application?

A network administrator wants to deploy GlobalProtect with pre-logon for Windows 10 endpoints and follow Palo Alto Networks best practices. To install the certificate and key for a...

To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?

Which GlobalProtect gateway setting is required to enable split-tunneling by access route, destination domain, and application?

Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two)

An administrator is attempting to create policies tor deployment of a device group and template stack. When creating the policies, the zone drop down list does not include the requ...

A user's traffic traversing a Palo Alto Networks NGFW sometimes can reach How can the firewall be configured automatically disable the PBF rule if the next hop goes down?

An engineer is in the planning stages of deploying User-ID in a diverse directory services environment. Which server OS platforms can be used for server monitoring with User-ID?

Your company has to Active Directory domain controllers spread across multiple WAN links. All users authenticate to Active Directory Each link has substantial network bandwidth to...

A customer is replacing their legacy remote access VPN solution. The current solution is in place to secure only internet egress for the connected clients. Prisma Access has been s...

What best describes the HA Promotion Hold Time?