Palo Alto Networks Palo Alto Networks Certifications PCNSE Questions & Answers

• Question 381:

  Which Palo Alto Networks VM-Series firewall is supported for VMware NSX?

  A. VM-100

  B. VM-200

  C. VM-1000-HV

  D. VM-300

  Correct Answer: C

• Question 382:

  Only two Trust to Untrust allow rules have been created in the Security policy

  Rule1 allows google-base

  Rule2 allows youtube-base

  The youtube-base App-ID depends on google-base to function. The google-base App-ID implicitly uses SSL and web-browsing. When user try to accesss https://www.youtube.com in a web browser, they get an error indecating that the server cannot be found.

  Which action will allow youtube.com display in the browser correctly?

  A. Add SSL App-ID to Rule1

  B. Create an additional Trust to Untrust Rule, add the web-browsing, and SSL App-ID's to it

  C. Add the DNS App-ID to Rule2

  D. Add the Web-browsing App-ID to Rule2

  Correct Answer: C

• Question 383:

  Which type of interface does a firewall use to forward decrypted traffic to a security chain for inspection?

  A. Layer 1

  B. Layer 3

  C. Tap

  D. Decryption Mirror

  Correct Answer: B

• Question 384:

  Which three fields can be included in a pcap filter? (Choose three)

  A. Egress interface

  B. Source IP

  C. Rule number

  D. Destination IP

  E. Ingress interface

  Correct Answer: BCD

  (https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Packet-Capture/ta- p/72069)

• Question 385:

  Which two actions are required to make Microsoft Active Directory users appear in a firewall traffic log? (Choose two.)

  A. Run the User-ID Agent using an Active Directory account that has "event log viewer" permissions

  B. Enable User-ID on the zone object for the destination zone

  C. Run the User-ID Agent using an Active Directory account that has "domain administrator" permissions

  D. Enable User-ID on the zone object for the source zone

  E. Configure a RADIUS server profile to point to a domain controller

  Correct Answer: AD

• Question 386:

  Which two interface types can be used when configuring GlobalProtect Portal? (Choose two)

  A. Virtual Wire

  B. Loopback

  C. Layer 3

  D. Tunnel

  Correct Answer: BC

• Question 387:

  Starting with PAN-OS version 9.1, Global logging information is now recoded in which firewall log?

  A. Authentication

  B. Globalprotect

  C. Configuration

  D. System

  Correct Answer: D

• Question 388:

  Several offices are connected with VPNs using static IPV4 routes. An administrator has been tasked with implementing OSPF to replace static routing. Which step is required to accoumplish this goal?

  A. Assign an IP address on each tunnel interface at each site

  B. Enable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0

  C. Assign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfaces

  D. Create new VPN zones at each site to terminate each VPN connection

  Correct Answer: C

• Question 389:

  A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-home or beacon out to external command-and-control (C2) servers. Which security Profile type will prevent these behaviors?

  A. WildFire

  B. Anti-Spyware

  C. Vulnerability Protection

  D. Antivirus

  Correct Answer: B

  https://www.paloaltonetworks.com/documentation/71/pan-os/pan- os/policy/anti-spyware-profiles Anti-Spyware profiles blocks spyware on compromised hosts from trying to phone-home or beacon out to external command-and-control (C2) servers, allowing you to detect malicious traffic leaving the network from infected clients. You can apply various levels of protection between zones. For example, you may want to have custom Anti-Spyware profiles that minimize inspection between trusted zones, while maximizing inspection on traffic received from an untrusted zone, such as internet-facing zones.

  https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles

• Question 390:

  Which CLI command displays the current management plan memory utilization?

  A. > show system info

  B. > show system resources

  C. > debug management-server show

  D. > show running resource-monitor

  Correct Answer: B

  https://live.paloaltonetworks.com/t5/Management-Articles/Show-System- Resource-Command-Displays-CPU-Utilization-of-9999/ta-p/58149