PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 7

- (Exam Topic 2)
How can an administrator configure the NGFW to automatically quarantine a device using GlobalProtect?

A. by adding the device's Host ID to a quarantine list and configure GlobalProtect to prevent users fromconnecting to the GlobalProtect gateway from a quarantined device

B. by using secunty policies, log forwarding profiles, and log settings.

C. by exporting the list of quarantined devices to a pdf or csv file by selecting PDF/CSV at the bottom of the Device Quarantine page and leveraging the approbate XSOAR playbook

D. There is no native auto-quarantine feature so a custom script would need to be leveraged.

Correct Answer:A

Question 8

- (Exam Topic 3)
Site-A and Site-B have a site-to-site VPN set up between them. OSPF is configured to dynamically create the routes between the sites. The OSPF configuration in Site-A is configured properly, but the route for the tunner is not being established. The Site-B interfaces in the graphic are using a broadcast Link Type. The administrator has determined that the OSPF configuration in Site-B is using the wrong Link Type for one of its interfaces.
PCNSE dumps exhibit
Which Link Type setting will correct the error?

A. Set tunne

B. 1 to p2p

C. Set tunne

D. 1 to p2mp

E. Set Ethernet 1/1 to p2mp

F. Set Ethernet 1/1 to p2p

Correct Answer:A

Question 9

- (Exam Topic 3)
A logging infrastructure may need to handle more than 10,000 logs per second. Which two options support a dedicated log collector function? (Choose two)

A. Panorama virtual appliance on ESX(i) only

B. M-500

C. M-100 with Panorama installed

D. M-100

Correct Answer:BC
(https://live.paloaltonetworks.com/t5/Management-Articles/Panorama-Sizing-and-Design-Guide/ta-p/72181)

Question 10

- (Exam Topic 2)
Based on the following image,
PCNSE dumps exhibit
what is the correct path of root, intermediate, and end-user certificate?

A. Palo Alto Networks > Symantec > VeriSign

B. Symantec > VeriSign > Palo Alto Networks

C. VeriSign > Palo Alto Networks > Symantec

D. VeriSign > Symantec > Palo Alto Networks

Correct Answer:B

Question 11

- (Exam Topic 3)
Which three fields can be included in a pcap filter? (Choose three)

A. Egress interface

B. Source IP

C. Rule number

D. Destination IP

E. Ingress interface

Correct Answer:BCD
(https://live.paloaltonetworks.com/t5/Featured-Articles/Getting-Started-Packet-Capture/ta-p/72069)

Question 12

- (Exam Topic 2)
A session in the Traffic log is reporting the application as “incomplete.” What does “incomplete” mean?

A. The three-way TCP handshake was observed, but the application could not be identified.

B. The three-way TCP handshake did not complete.

C. The traffic is coming across UDP, and the application could not be identified.

D. Data was received but was instantly discarded because of a Deny policy was applied before App-ID could be applied.

Correct Answer:B
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClibCAC

START PCNSE EXAM