Palo Alto Networks Palo Alto Certifications and Accreditations PCNSC Questions & Answers

• Question 1:

  A network security engineer is asked to provide a report on bandwidth usage. Which tab in the ACC provides the information needed to create the report?

  A. Blocked Activity

  B. Bandwidth Activity

  C. Threat Activity

  D. Network Activity

  Correct Answer: D

• Question 2:

  Which URL Filtering Security Profile action logs the URL Filtering category to the URL Filtering log?

  A. Log

  B. Alert

  C. Allow

  D. Default

  Correct Answer: B

• Question 3:

  Anadministrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors. How would the administrator establish the chain of trust?

  A. Use custom certificates

  B. Enable LDAP or RADIUS integration

  C. Set up multi-factor authentication

  D. Configure strong password authentication

  Correct Answer: A

• Question 4:

  An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.)

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: ABC

• Question 5:

  A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.

  How would an administrator configure the interface to IGbps?

  A. set deviceconfig system speed-duplex 10Gbps-full-duplex

  B. set deviceconfig interface speed-duplex 1Gbs--full-duplex

  C. set deviceconfig interface speed-duplex 1Gbs--half-duplex

  D. set deviceconfig system speed-duplex 1Gbs--half-duplex.

  Correct Answer: D

• Question 6:

  Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)

  A. Configure an EDL to pull IP Addresses of known sites resolved from a CRL.

  B. Create a Security Policy rule with vulnerability Security Profile attached.

  C. Create a no-decrypt Decryption Policy rule.

  D. Enable the "Block seasons with untrusted Issuers- setting.

  E. Configure a Dynamic Address Group for untrusted sites.

  Correct Answer: BD

• Question 7:

  An administrator has left a firewall to used default port for all management services. Which three function performed by the dataplane? (Choose three.)

  A. NTP

  B. antivirus

  C. NAT

  D. WildFire updates

  E. file blocking

  Correct Answer: ACD

• Question 8:

  Which DoS protection mechanism detects and prevents session exhaustion attacks?

  A. TCP Port Scan Protection

  B. Flood Protection

  C. Resource Protection

  D. Pocket Based Attack Protection

  Correct Answer: C

• Question 9:

  A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server. Which solution in PAN -OS software would help in this case?

  A. content inspection

  B. application override

  C. Virtual Wire mode

  D. redistribution of user mappings

  Correct Answer: D

• Question 10:

  An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

  A. firewall connectivity to a CRL

  B. Root certificate imported into the firewall with "Trust" enabled

  C. importation of a certificate from an HSM

  D. Security policy rule allowing SSL to the target server

  Correct Answer: D