Palo Alto Networks Palo Alto Networks Certifications PCNSE8 Questions & Answers

• Question 101:

  Which Panorama administrator types require the configuration of at least one access domain? (Choose two)

  A. Dynamic

  B. Custom Panorama Admin

  C. Role Based

  D. Device Group

  E. Template Admin

  Correct Answer: DE

• Question 102:

  A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks. How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

  A. Define a custom App-ID to ensure that only legitimate application traffic reaches the server

  B. Add QoS Profiles to throttle incoming requests

  C. Add a tuned DoS Protection Profile

  D. Add an Anti-Spyware Profile to block attacking IP address

  Correct Answer: C

• Question 103:

  When backing up and saving configuration files, what is achieved using only the firewall and is not available in Panorama?

  A. Load named configuration snapshot

  B. Load configuration version

  C. Save candidate config

  D. Export device state

  Correct Answer: A

• Question 104:

  In which two types of deployment is active/active HA configuration supported? (Choose two.)

  A. TAP mode

  B. Layer 2 mode

  C. Virtual Wire mode

  D. Layer 3 mode

  Correct Answer: CD

• Question 105:

  An administrator just submitted a newly found piece of spyware for WildFire analysis. The spyware passively monitors behavior without the user's knowledge. What is the expected verdict from WildFire?

  A. Gray ware

  B. Malware

  C. Spyware

  D. Phishing

  Correct Answer: A

• Question 106:

  What are the differences between using a service versus using an application for Security Policy match?

  A. Use of a "service" enables the firewall to take action after enough packets allow for App-ID identification

  B. Use of a "service" enables the firewall to take immediate action with the first observed packet based on port numbers Use ofan "application" allows the firewall to take action after enough packets allow for App-ID identification regardless of the portsbeing used.

  C. There are no differences between "service" or "application" Use of an "application" simplifies configuration by allowing use ofa friendly application name instead of port numbers.

  D. Use of a "service" enables the firewall to take immediate action with the first observed packet based on port numbers. Use ofan "application" allows the firewall to take immediate action it the port being used is a member of the application standardport list

  Correct Answer: B

• Question 107:

  Which feature can provide NGFWs with User-ID mapping information?

  A. GlobalProtect

  B. Web Captcha

  C. Native 802.1q authentication

  D. Native 802.1x authentication

  Correct Answer: A

• Question 108:

  Which GlobalProtect Client connect method requires the distribution and use of machine certificates?

  A. User-logon (Always on)

  B. At-boot

  C. On-demand

  D. Pre-logon

  Correct Answer: D

• Question 109:

  Which operation will impact the performance of the management plane?

  A. WildFire Submissions

  B. DoS Protection

  C. decrypting SSL Sessions

  D. Generating a SaaS Application Report.

  Correct Answer: C

• Question 110:

  When configuring the firewall for packet capture, what are the valid stage types?

  A. Receive, management , transmit , and drop

  B. Receive , firewall, send , and non-syn

  C. Receive management , transmit, and non-syn

  D. Receive , firewall, transmit, and drop

  Correct Answer: D