Palo Alto Networks Palo Alto Certifications and Accreditations PCNSC Questions & Answers

• Question 21:

  During the packet flow process, which two processes are performed in application identification? (Choose two.)

  A. Application changed from content inspection

  B. session application identified

  C. pattern based application identification

  D. application override policy match

  Correct Answer: BD

• Question 22:

  Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

  A. No prerequisites are required

  B. SSH keys must be manually generated

  C. Both SSH keys and SSL certificates must be generated

  D. SSL certificates must be generated

  Correct Answer: A

• Question 23:

  What are two benefits of nested device groups in panorama? (Choose two )

  A. overwrites local firewall configuration

  B. requires configuration both function and location for every device

  C. all device groups inherit setting from the Shared group

  D. reuse of the existing Security policy rules and objects

  Correct Answer: BC

• Question 24:

  VPN traffic intended for an administrator's Palo Alto Networks NGfW is being maliciously intercepted and retransmitted by the interceptor. When Creating a VPN tunnel, which protection profile cm be enabled to prevent this malicious behavior?

  A. zone Protection

  B. Web Application

  C. DoS Protection

  D. Replay

  Correct Answer: A

• Question 25:

  What will be the egress interface if the traffic's ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.

  

  A. ethernet 1/6

  B. ethernet 1/5

  C. ethernet 1/3

  D. ethernet 1/7

  Correct Answer: C

• Question 26:

  Which option would an administration choose to define the certificate and protect that Panorama and its managed devices uses for SSL/ITS services?

  A. Set Up SSL/TLS under Policies > Service/URL Category > Service.

  B. Configure on SSL/TLS Profile.

  C. Configure a Decryption Profile and select SSL/TLS services.

  D. Set up Security policy rule to allow SSL communication.

  Correct Answer: B

• Question 27:

  A user's traffic traversing a Palo Alto Networks NGFW sometime can reach http//www company com At the session times out. The NGFW has been configured with a PBF rule that the user's traffic matches when it goes to http //www company com.

  How con the firewall be configured to automatically disable the PBF rule if the next hop goes down?

  A. Configure path monitoring for tine next hop gateway on the default route in tin- virtual router.

  B. Enable and configure a Link Monitoring Profile for the external interface of the firewall.

  C. Create and add a Monitor Profile with an action of Wait Recover in the PBF rule in question.

  D. Create and add a Monitor Profile with an action of Fail Over in the PBF rule in question.

  Correct Answer: D

• Question 28:

  A Company needs to preconfigured firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.

  Which VPN configuration would adapt to changes when deployed to Hie future site?

  A. preconfigured GlobalProtcet satellite

  B. preconfigured GlobalProtcet client

  C. preconfigured iPsec tunnels

  D. preconfigured PPTP Tunnels

  Correct Answer: A

• Question 29:

  Which feature can be configured on VM-Series firewalls'?

  A. aggregate interlaces

  B. multiple virtual systems

  C. Globallprotect

  D. machine learning

  Correct Answer: C

• Question 30:

  When is the content inspection performed in the packet flow process?

  A. after the SSL Proxy re-encrypts the packet

  B. before the packet forwarding process

  C. after the application has been identified

  D. before session lookup

  Correct Answer: C