PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 19

- (Exam Topic 2)
Which feature must you configure to prevent users form accidentally submitting their corporate credentials to a phishing website?

A. URL Filtering profile

B. Zone Protection profile

C. Anti-Spyware profile

D. Vulnerability Protection profile

Correct Answer:A
Reference:
https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/threat-prevention/prevent-credential-phishi

Question 20

- (Exam Topic 3)
A network engineer has revived a report of problems reaching 98.139.183.24 through vr1 on the firewall. The routing table on this firewall is extensive and complex.
Which CLI command will help identify the issue?

A. test routing fib virtual-router vr1

B. show routing route type static destination 98.139.183.24

C. test routing fib-lookup ip 98.139.183.24 virtual-router vr1

D. show routing interface

Correct Answer:C

Question 21

- (Exam Topic 1)
PBF can address which two scenarios? (Select Two)

A. forwarding all traffic by using source port 78249 to a specific egress interface

B. providing application connectivity the primary circuit fails

C. enabling the firewall to bypass Layer 7 inspection

D. routing FTP to a backup ISP link to save bandwidth on the primary ISP link

Correct Answer:AC

Question 22

- (Exam Topic 3)
Only two Trust to Untrust allow rules have been created in the Security policy Rule1 allows google-base
Rule2 allows youtube-base
The youtube-base App-ID depends on google-base to function. The google-base App-ID implicitly uses SSL and web-browsing. When user try to accesss https://www.youtube.com in a web browser, they get an error indecating that the server cannot be found.
Which action will allow youtube.com display in the browser correctly?

A. Add SSL App-ID to Rule1

B. Create an additional Trust to Untrust Rule, add the web-browsing, and SSL App-ID's to it

C. Add the DNS App-ID to Rule2

D. Add the Web-browsing App-ID to Rule2

Correct Answer:C

Question 23

- (Exam Topic 3)
Which three log-forwarding destinations require a server profile to be configured? (Choose three)

A. SNMP Trap

B. Email

C. RADIUS

D. Kerberos

E. Panorama

F. Syslog

Correct Answer:ABF

Question 24

- (Exam Topic 2)
What are the differences between using a service versus using an application for Security Policy match?

A. Use of a "service" enables the firewall to take action after enough packets allow for App-ID identification

B. Use of a "service" enables the firewall to take immediate action with the first observed packet based on port numbers Use of an "application" allows the firewall to take action after enough packets allow for App-ID identification regardless of the ports being used.

C. There are no differences between "service" or "application” Use of an "application" simplifies configuration by allowing use of a friendly application name instead of port numbers.

D. Use of a "service" enables the firewall to take immediate action with the first observed packet based on port number

E. Use of an "application" allows the firewall to take immediate action it the port being used is a member of the application standardport list

Correct Answer:B

START PCNSE EXAM