PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 79

- (Exam Topic 2)
Which two options prevent the firewall from capturing traffic passing through it? (Choose two.)

A. The firewall is in multi-vsys mode.

B. The traffic is offloaded.

C. The traffic does not match the packet capture filter.

D. The firewall’s DP CPU is higher than 50%.

Correct Answer:BC
Reference:
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/monitoring/take-packet-captures/disable-ha offload

Question 80

- (Exam Topic 2)
An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

A. Security policy rule allowing SSL to the target server

B. Firewall connectivity to a CRL

C. Root certificate imported into the firewall with “Trust” enabled

D. Importation of a certificate from an HSM

Correct Answer:A
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/decryption/configure-ssl-inbound-inspection.html

Question 81

- (Exam Topic 2)
When configuring a GlobalProtect Portal, what is the purpose of specifying an Authentication Profile?

A. To enable Gateway authentication to the Portal

B. To enable Portal authentication to the Gateway

C. To enable user authentication to the Portal

D. To enable client machine authentication to the Portal

Correct Answer:C
The additional options of Browser and Satellite enable you to specify the authentication profile to use for specific scenarios. Select Browser to specify the authentication profile to use to authenticate a user accessing the portal from a web browser with the intent of downloading the GlobalProtect agent (Windows and Mac). Select Satellite to specify the authentication profile to use to authenticate the satellite.
Reference
https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface-help/globalprotect/network-globalpr

Question 82

- (Exam Topic 3)
A network design calls for a "router on a stick" implementation with a PA-5060 performing inter-VLAN routing All VLAN-tagged traffic will be forwarded to the PA-5060 through a single dot1q trunk interface
Which interface type and configuration setting will support this design?

A. Trunk interface type with specified tag

B. Layer 3 interface type with specified tag

C. Layer 2 interface type with a VLAN assigned

D. Layer 3 subinterface type with specified tag

Correct Answer:D

Question 83

- (Exam Topic 2)
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

A. Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.

B. An administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 8.1 state.

C. When Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.

D. Administrators need to manually update variable characters to those used in pre-PAN-OS 8.1.

Correct Answer:A

Question 84

- (Exam Topic 3)
Which three options does the WF-500 appliance support for local analysis? (Choose three)

A. E-mail links

B. APK files

C. jar files

D. PNG files

E. Portable Executable (PE) files

Correct Answer:ACE

START PCNSE EXAM