1. Home
  2. Palo Alto Networks
  3. PCNSE

Palo Alto Networks Certified Network Security Engineer - PAN-OS 11.x (PCNSE)

Exam Details

  • Exam Code
    :PCNSE
  • Exam Name
    :Palo Alto Networks Certified Network Security Engineer - PAN-OS 11.x (PCNSE)
  • Certification
    :Palo Alto Networks Certifications
  • Vendor
    :Palo Alto Networks
  • Total Questions
    :860 Q&As
  • Last Updated
    :Jun 14, 2025

Palo Alto Networks Palo Alto Networks Certifications PCNSE Questions & Answers

  • Question 391:

    How does Panorama handle incoming logs when it reaches the maximum storage capacity?

    A. Panorama discards incoming logs when storage capacity full.

    B. Panorama stops accepting logs until licenses for additional storage space are applied

    C. Panorama stops accepting logs until a reboot to clean storage space.

    D. Panorama automatically deletes older logs to create space for new ones.

  • Question 392:

    A network security engineer needs to configure a virtual router using IPv6 addresses.

    Which two routing options support these addresses? (Choose two)

    A. BGP not sure

    B. OSPFv3

    C. RIP

    D. Static Route

  • Question 393:

    Which field is optional when creating a new Security Policy rule?

    A. Name

    B. Description

    C. Source Zone

    D. Destination Zone

    E. Action

  • Question 394:

    Firewall administrators cannot authenticate to a firewall GUI.

    Which two logs on that firewall will contain authentication-related information useful in troubleshooting this issue? (Choose two.)

    A. ms log

    B. authd log

    C. System log

    D. Traffic log

    E. dp-monitor .log

  • Question 395:

    Which interface configuration will accept specific VLAN IDs?

    A. Tab Mode

    B. Subinterface

    C. Access Interface

    D. Trunk Interface

  • Question 396:

    When a malware-infected host attempts to resolve a known command-and-control server, the traffic matches a security policy with DNS sinhole enabled, generating a traffic log.

    What will be the destination IP Address in that log entry?

    A. The IP Address of sinkhole.paloaltonetworks.com

    B. The IP Address of the command-and-control server

    C. The IP Address specified in the sinkhole configuration

    D. The IP Address of one of the external DNS servers identified in the anti-spyware database

  • Question 397:

    A logging infrastructure may need to handle more than 10,000 logs per second.

    Which two options support a dedicated log collector function? (Choose two)

    A. Panorama virtual appliance on ESX(i) only

    B. M-500

    C. M-100 with Panorama installed

    D. M-100

  • Question 398:

    Which option is an IPv6 routing protocol?

    A. RIPv3

    B. OSPFv3

    C. OSPv3

    D. BGP NG

  • Question 399:

    A network security engineer is asked to provide a report on bandwidth usage. Which tab in the ACC provides the information needed to create the report?

    A. Blocked Activity

    B. Bandwidth Activity

    C. Threat Activity

    D. Network Activity

  • Question 400:

    Panorama provides which two SD-WAN functions? (Choose two.)

    A. data plane

    B. physical network links

    C. network monitoring

    D. control plane

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Palo Alto Networks exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your PCNSE exam preparations and Palo Alto Networks certification application, do not hesitate to visit our Vcedump.com to find your solutions here.