PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 61

- (Exam Topic 3)
YouTube videos are consuming too much bandwidth on the network, causing delays in mission-critical traffic. The administrator wants to throttle YouTube traffic. The following interfaces and zones are in use on the firewall:
* ethernet1/1, Zone: Untrust (Internet-facing)
* ethernet1/2, Zone: Trust (client-facing)
A QoS profile has been created, and QoS has been enabled on both interfaces. A QoS rule exists to put the YouTube application into QoS class 6. Interface Ethernet1/1 has a QoS profile called Outbound, and interface Ethernet1/2 has a QoS profile called Inbound.
Which setting for class 6 with throttle YouTube traffic?

A. Outbound profile with Guaranteed Ingress

B. Outbound profile with Maximum Ingress

C. Inbound profile with Guaranteed Egress

D. Inbound profile with Maximum Egress

Correct Answer:D

Question 62

- (Exam Topic 3)
A network security engineer is asked to provide a report on bandwidth usage. Which tab in the ACC provides the information needed to create the report?

A. Blocked Activity

B. Bandwidth Activity

C. Threat Activity

D. Network Activity

Correct Answer:D

Question 63

- (Exam Topic 3)
An Administrator is configuring an IPSec VPN toa Cisco ASA at the administrator's home and experiencing issues completing the connection. The following is th output from the command:
less mp-log ikemgr.log:
PCNSE dumps exhibit
What could be the cause of this problem?

A. The public IP addresse do not match for both the Palo Alto Networks Firewall and the ASA.

B. The Proxy IDs on the Palo Alto Networks Firewall do not match the settings on the ASA.

C. The shared secerts do not match between the Palo Alto firewall and the ASA

D. The deed peer detection settings do not match between the Palo Alto Networks Firewall and the ASA

Correct Answer:B

Question 64

- (Exam Topic 2)
Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?

A. port mapping

B. server monitoring

C. client probing

D. XFF headers

Correct Answer:A
https://docs.paloaltonetworks.com/pan-os/8-0/pan-os-admin/user-id/map-ip-addresses-to-users/configure-user-m

Question 65

- (Exam Topic 3)
A company has a web server behind a Palo Alto Networks next-generation firewall that it wants to make accessible to the public at 1.1.1.1. The company has decided to configure a destination NAT Policy rule.
Given the following zone information:
•DMZ zone: DMZ-L3
•Public zone: Untrust-L3
•Guest zone: Guest-L3
•Web server zone: Trust-L3
•Public IP address (Untrust-L3): 1.1.1.1
•Private IP address (Trust-L3): 192.168.1.50
What should be configured as the destination zone on the Original Packet tab of NAT Policy rule?

A. Untrust-L3

B. DMZ-L3

C. Guest-L3

D. Trust-L3

Correct Answer:A

Question 66

- (Exam Topic 2)
The certificate information displayed in the following image is for which type of certificate? Exhibit:
PCNSE dumps exhibit

A. Forward Trust certificate

B. Self-Signed Root CA certificate

C. Web Server certificate

D. Public CA signed certificate

Correct Answer:B

START PCNSE EXAM