PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 13

- (Exam Topic 2)
An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against worms and trojans. Which Security Profile type will protect against worms and trojans?

A. Anti-Spyware

B. WildFire

C. Vulnerability Protection

D. Antivirus

Correct Answer:D
Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/antivirus-profiles

Question 14

- (Exam Topic 1)
When setting up a security profile which three items can you use? (Choose three )

A. Wildfire analysis

B. anti-ransom ware

C. antivirus

D. URL filtering

E. decryption profile

Correct Answer:ACD
https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/policy/security-profiles

Question 15

- (Exam Topic 3)
A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server.
What can be done to simplify the NAT policy?

A. Configure ECMP to handle matching NAT traffic

B. Configure a NAT Policy rule with Dynamic IP and Port

C. Create a new Source NAT Policy rule that matches the existing traffic and enable the Bi-directional option

D. Create a new Destination NAT Policy rule that matches the existing traffic and enable the Bi-directional option

Correct Answer:C
https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/networking/nat-configuration-examples

Question 16

- (Exam Topic 3)
A client is deploying a pair of PA-5000 series firewalls using High Availability (HA) in Active/Passive mode. Which statement is true about this deployment?

A. The two devices must share a routable floating IP address

B. The two devices may be different models within the PA-5000 series

C. The HA1 IP address from each peer must be on a different subnet

D. The management port may be used for a backup control connection

Correct Answer:D

Question 17

- (Exam Topic 3)
An administrator has left a firewall to use the data of port for all management service which there functions are performed by the data face? (Choose three.)

A. NTP

B. Antivirus

C. Wildfire updates

D. NAT

E. File tracking

Correct Answer:ACD

Question 18

- (Exam Topic 3)
Which Public Key infrastructure component is used to authenticate users for GlobalProtect when the Connect Method is set to pre-logon?

A. Certificate revocation list

B. Trusted root certificate

C. Machine certificate

D. Online Certificate Status Protocol

Correct Answer:C

START PCNSE EXAM