Palo Alto Networks Palo Alto Networks Certifications PCNSE8 Questions & Answers

• Question 51:

  What are three possible verdicts that WildFire can provide for an analyzed sample? (Choose three)

  A. Clean

  B. Bengin

  C. Adware

  D. Suspicious

  E. Grayware

  F. Malware

  Correct Answer: BEF

  https://www.paloaltonetworks.com/documentation/70/pan-HYPERLINK "https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/wildfire- features/wildfire-grayware-verdict"os/newfeaturesguide/wildfire-features/wildfiregrayware-verdict

• Question 52:

  Which three function are found on the dataplane of a PA-5050? (Choose three)

  A. Protocol Decoder

  B. Dynamic routing

  C. Management

  D. Network Processing

  E. Signature Match

  Correct Answer: BDE

• Question 53:

  What are three valid method of user mapping? (Choose three)

  A. Syslog

  B. XML API

  C. 802.1X

  D. WildFire

  E. Server Monitoring

  Correct Answer: ABE

• Question 54:

  Click the Exhibit button below,

  

  A firewall has three PBF rules and a default route with a next hop of 172.20.10.1 that is configured in the default VR. A user named Will has a PC with a 192.168.10.10 IP address. He makes an HTTPS connection to 172.16.10.20. Which is the next hop IP address for the HTTPS traffic from Will's PC?

  A. 172.20.30.1

  B. 172.20.40.1

  C. 172.20.20.1

  D. 172.20.10.1

  Correct Answer: C

• Question 55:

  A network administrator uses Panorama to push security polices to managed firewalls at branch offices.

  Which policy type should be configured on Panorama if the administrators at the branch office sites to override these products?

  A. Pre Rules

  B. Post Rules

  C. Explicit Rules

  D. Implicit Rules

  Correct Answer: A

• Question 56:

  A network security engineer is asked to provide a report on bandwidth usage. Which tab in the ACC provides the information needed to create the report?

  A. Blocked Activity

  B. Bandwidth Activity

  C. Threat Activity

  D. Network Activity

  Correct Answer: D

• Question 57:

  A network security engineer has been asked to analyze Wildfire activity. However, the Wildfire Submissions item is not visible form the Monitor tab. What could cause this condition?

  A. The firewall does not have an active WildFire subscription.

  B. The engineer's account does not have permission to view WildFire Submissions.

  C. A policy is blocking WildFire Submission traffic.

  D. Though WildFire is working, there are currently no WildFire Submissions log entries.

  Correct Answer: B

• Question 58:

  What must be used in Security Policy Rule that contain addresses where NAT policy applies?

  A. Pre-NAT addresse and Pre-NAT zones

  B. Post-NAT addresse and Post-Nat zones

  C. Pre-NAT addresse and Post-Nat zones

  D. Post-Nat addresses and Pre-NAT zones

  Correct Answer: C

• Question 59:

  Company.com has an in-house application that the Palo Alto Networks device doesn't identify correctly. A Threat Management Team member has mentioned that this in-house application is very sensitive and all traffic being identified needs

  to be inspected by the Content-ID engine.

  Which method should company.com use to immediately address this traffic on a Palo Alto Networks device?

  A. Create a custom Application without signatures, then create an Application Override policy that includes the source, Destination, Destination Port/Protocol and Custom Application of the traffic.

  B. Wait until an official Application signature is provided from Palo Alto Networks.

  C. Modify the session timer settings on the closest referanced application to meet the needs of the in-house application

  D. Create a Custom Application with signatures matching unique identifiers of the in-house application traffic

  Correct Answer: D

• Question 60:

  A network security engineer is asked to perform a Return Merchandise Authorization (RMA) on a firewall Which part of files needs to be imported back into the replacement firewall that is using Panorama?

  A. Device state and license files

  B. Configuration and serial number files

  C. Configuration and statistics files

  D. Configuration and Large Scale VPN (LSVPN) setups file

  Correct Answer: A