Palo Alto Networks PCNSC Online Practice Questions and Exam Preparation

Palo Alto Networks PCNSC Online Questions & Answers

• Question 131:

  An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.)

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A
  B. Option B
  C. Option C

  ---

  Explanation/Reference:

• Question 132:

  The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.

  Which two options would help the administrator Troubleshoot this issue? (Choose two.)

  A. Perform a traffic pcap on the NGFW lo see any BGP problems
  B. View the System logs and look for error messages about BGP
  C. View the Runtime Stats and look for problems with BGP configuration
  D. View the ACC lab to isolate routing issues.
  C. View the Runtime Stats and look for problems with BGP configuration
  D. View the ACC lab to isolate routing issues.

• Question 133:

  Which two methods can be configured to validate the revocation status of a certificate? (Choose two)

  A. CRL
  B. Cert-Validation-Profile
  C. OCSP
  D. CRT
  E. SSL /TLS Service Profile
  B. Cert-Validation-Profile
  D. CRT

• Question 134:

  A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.

  How would an administrator configure the interface to IGbps?

  A. set deviceconfig system speed-duplex 10Gbps-full-duplex
  B. set deviceconfig interface speed-duplex 1Gbs--full-duplex
  C. set deviceconfig interface speed-duplex 1Gbs--half-duplex
  D. set deviceconfig system speed-duplex 1Gbs--half-duplex.
  D. set deviceconfig system speed-duplex 1Gbs--half-duplex.

• Question 135:

  Which option would an administrator choose to define the certificate and protocol that Panorama and its managed devices use for SSL/TLSservices?

  A. Configure a Decryption Profile and select SSL/TLS services.
  B. Set up SSL/TLS under Polices >Service/URL Category>Service.
  C. Set up Security policy rule to allow SSL communication.
  D. Configure an SSL/TLS Profile.
  D. Configure an SSL/TLS Profile.

  ---

  Explanation/Reference:

• Question 136:

  Which three options are supposed in HA Lite? (Choose three.)

  A. Configuration synchronization
  B. Virtual link
  C. active/passive deployment
  D. session synchronization
  E. synchronization of IPsec security associations
  A. Configuration synchronization
  C. active/passive deployment
  E. synchronization of IPsec security associations

• Question 137:

  A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port 443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.

  Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?

  A. Rule# 1 application: ssl; service application-default: action allow Role # 2 application web browsing, service application default, action allow
  B. Rule #1application web-browsing, service service imp action allow Rule #2 application ssl. service application -default, action allow
  C. Rule#1 application web-brows.no service application-default, action allow Rule #2 application ssl. Service application-default, action allow
  D. Rule#1application: web-biows.no; service service-https action allow Rule#2 application ssl. Service application-default, action allow
  C. Rule#1 application web-brows.no service application-default, action allow Rule #2 application ssl. Service application-default, action allow

• Question 138:

  In an environment using User-ID, what role does the User-ID agent play?

  A. It assigns IP addresses to users
  B. It maps user identities to IP addresses
  C. It inspects traffic for malicious content
  D. It enforces security policies based on IP addresses
  B. It maps user identities to IP addresses

• Question 139:

  A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation.

  Which two formats are correct for naming aggregate interlaces? (Choose two.)

  A. aggregate.8
  B. ae.8
  C. ae.1
  D. aggregate.1
  B. ae.8
  C. ae.1

• Question 140:

  Which three file types can be forward to WildMFire for analysis a part of the basic WildMFire service?

  A. .exe
  B. .apk
  C. .dil
  D. .jar
  E. .pdf
  F. .fon
  B. .apk
  D. .jar
  E. .pdf