PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 67

- (Exam Topic 3)
Which two virtualized environments support Active/Active High Availability (HA) in PAN-OS 8.0? (Choose two.)

A. KVM

B. VMware ESX

C. VMware NSX

D. AWS

Correct Answer:AB

Question 68

- (Exam Topic 3)
Given the following table.
PCNSE dumps exhibit
Which configuration change on the firewall would cause it to use 10.66.24.88 as the next hop for the 192.168.93.0/30 network?

A. Configuring the administrative Distance for RIP to be lower than that of OSPF Int.

B. Configuring the metric for RIP to be higher than that of OSPF Int.

C. Configuring the administrative Distance for RIP to be higher than that of OSPF Ext.

D. Configuring the metric for RIP to be lower than that OSPF Ext.

Correct Answer:A

Question 69

- (Exam Topic 3)
Click the Exhibit button
PCNSE dumps exhibit
An administrator has noticed a large increase in bittorrent activity. The administrator wants to determine where the traffic is going on the company.
What would be the administrator's next step?

A. Right-Click on the bittorrent link and select Value from the context menu

B. Create a global filter for bittorrent traffic and then view Traffic logs.

C. Create local filter for bittorrent traffic and then view Traffic logs.

D. Click on the bittorrent application link to view network activity

Correct Answer:D

Question 70

- (Exam Topic 2)
What is exchanged through the HA2 link?

A. hello heartbeats

B. User-ID information

C. session synchronization

D. HA state information

Correct Answer:C
Reference:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/high-availability/ha-links-and-backup-links

Question 71

- (Exam Topic 1)
An engineer is planning an SSL decryption implementation
Which of the following statements is a best practice for SSL decryption?

A. Obtain an enterprise CA-signed certificate for the Forward Trust certificate

B. Obtain a certificate from a publicly trusted root CA for the Forward Trust certificate

C. Use an enterprise CA-signed certificate for the Forward Untrust certificate

D. Use the same Forward Trust certificate on all firewalls in the network

Correct Answer:D

Question 72

- (Exam Topic 2)
Which option is part of the content inspection process?

A. Packet forwarding process

B. SSL Proxy re-encrypt

C. IPsec tunnel encryption

D. Packet egress process

Correct Answer:B
http://live.paloaltonetworks.com//t5/image/serverpage/image-id/12862i950F549C7D4E6309

START PCNSE EXAM