Palo Alto Networks Palo Alto Networks Certifications PCNSE Questions & Answers

• Question 361:

  What can missing SSL packets when performing a packet capture on dataplane interfaces?

  A. The packets are hardware offloaded to the offloaded processor on the dataplane

  B. The missing packets are offloaded to the management plane CPU

  C. The packets are not captured because they are encrypted

  D. There is a hardware problem with offloading FPGA on the management plane

  Correct Answer: A

• Question 362:

  Which two methods can be used to mitigate resource exhaustion of an application server? (Choose two)

  A. Vulnerability Object

  B. DoS Protection Profile

  C. Data Filtering Profile

  D. Zone Protection Profile

  Correct Answer: BD

• Question 363:

  Which operation will impact performance of the management plane?

  A. DoS protection

  B. WildFire submissions

  C. generating a SaaS Application report

  D. decrypting SSL sessions

  Correct Answer: C

• Question 364:

  Which three log-forwarding destinations require a server profile to be configured? (Choose three)

  A. SNMP Trap

  B. Email

  C. RADIUS

  D. Kerberos

  E. Panorama

  F. Syslog

  Correct Answer: ABF

• Question 365:

  What are three valid actions in a File Blocking Profile? (Choose three)

  A. Forward

  B. Block

  C. Alret

  D. Upload

  E. Reset-both

  F. Continue

  Correct Answer: ABC

  https://live.paloaltonetworks.com/t5/Configuration-Articles/File-Blocking- Rulebase-and-Action-Precedence/ta-p/53623

• Question 366:

  A company hosts a publically accessible web server behind a Palo Alto Networks next generation firewall with the following configuration information.

  Users outside the company are in the "Untrust-L3" zone The web server physically resides in the "Trust-L3" zone. Web server public IP address: 23.54.6.10 Web server private IP address: 192.168.1.10

  Which two items must be NAT policy contain to allow users in the untrust-L3 zone to access the web server? (Choose two)

  A. Untrust-L3 for both Source and Destination zone

  B. Destination IP of 192.168.1.10

  C. Untrust-L3 for Source Zone and Trust-L3 for Destination Zone

  D. Destination IP of 23.54.6.10

  Correct Answer: CD

• Question 367:

  Which three rule types are available when defining policies in Panorama? (Choose three.)

  A. Pre Rules

  B. Post Rules

  C. Default Rules

  D. Stealth Rules

  E. Clean Up Rules

  Correct Answer: ABC

  https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface- help/panorama-web-interface/defining-policies-on-panorama

• Question 368:

  A company hosts a publicly accessible web server behind a Palo Alto Networks next- generation firewall with the following configuration information:

  *

  Users outside the company are in the "Untrust-L3" zone.

  *

  The web server physically resides in the "Trust-L3" zone.

  *

  Web server public IP address: 23.54.6.10

  *

  Web server private IP address: 192.168.1.10

  Which two items must the NAT policy contain to allow users in the Untrust-L3 zone to access the web server? (Choose two.)

  A.

  Destination IPof 23.54.6.10

  B.

  UntrustL3 for both Source and Destination Zone

  C.

  Destination IP of 192.168.1.10

  D.

  UntrustL3 for Source Zone and Trust-L3 for Destination Zone

  Correct Answer: AB

• Question 369:

  Palo Alto Networks maintains a dynamic database of malicious domains.

  Which two Security Platform components use this database to prevent threats? (Choose two)

  A. Brute-force signatures

  B. BrightCloud Url Filtering

  C. PAN-DB URL Filtering

  D. DNS-based command-and-control signatures

  Correct Answer: CD

• Question 370:

  Click the Exhibit button An administrator has noticed a large increase in bittorrent activity. The administrator wants to determine where the traffic is going on the company.

  

  What would be the administrator's next step?

  A. Right-Click on the bittorrent link and select Value from the context menu

  B. Create a global filter for bittorrent traffic and then view Traffic logs.

  C. Create local filter for bittorrent traffic and then view Traffic logs.

  D. Click on the bittorrent application link to view network activity

  Correct Answer: D