Palo Alto Networks Palo Alto Networks Certifications PCNSE8 Questions & Answers

• Question 251:

  Based on the image, what caused the commit warning?

  

  A. The CA certificate for FWDtrust has not been imported into the firewall.

  B. The FWDtrust certificate has not been flagged as Trusted Root CA.

  C. SSL Forward Proxy requires a public certificate to be imported into the firewall.

  D. The FWDtrust certificate does not have a certificate chain.

  Correct Answer: D

• Question 252:

  Which three split tunnel methods are supported by a globalProtect gateway? (Choose three.)

  A. video streaming application

  B. Client Application Process

  C. Destination Domain

  D. Source Domain

  E. Destination user/group

  F. URL Category

  Correct Answer: ABC

  Reference: https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/globalprotect-features/split-tunnel-for-public-applications

• Question 253:

  SAML SLO is supported for which two firewall features? (Choose two.)

  A. GlobalProtect Portal

  B. CaptivePortal

  C. WebUI

  D. CLI

  Correct Answer: AB

  Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure-saml-authentication

• Question 254:

  What is the purpose of the firewall decryption broker?

  A. Decrypt SSL traffic a then send it as cleartext to a security chain of inspection tools

  B. Force decryption of previously unknown cipher suites

  C. Inspection traffic within IPsec tunnel

  D. Reduce SSL traffic to a weaker cipher before sending it to a security chain of inspection tools

  Correct Answer: A

  Reference: https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/decryption-features/decryption-broker

• Question 255:

  When using the predefined default profile, the policy will inspect for viruses on the decoders. Match each decoder with its default action. Answer options may be used more than once or not at all.

  Select and Place:

  

  Correct Answer: