PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 37

- (Exam Topic 2)
Which CLI command enables an administrator to check the CPU utilization of the dataplane?

A. show running resource-monitor

B. debug data-plane dp-cpu

C. show system resources

D. debug running resources

Correct Answer:A
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClXwCAK

Question 38

- (Exam Topic 3)
After pushing a security policy from Panorama to a PA-3020 firwall, the firewall administrator notices that traffic logs from the PA-3020 are not appearing in Panorama’s traffic logs. What could be the problem?

A. A Server Profile has not been configured for logging to this Panorama device.

B. Panorama is not licensed to receive logs from this particular firewall.

C. The firewall is not licensed for logging to this Panorama device.

D. None of the firwwall's policies have been assigned a Log Forwarding profile

Correct Answer:D

Question 39

- (Exam Topic 2)
During the packet flow process, which two processes are performed in application identification? (Choose two.)

A. Pattern based application identification

B. Application override policy match

C. Application changed from content inspection

D. Session application identified.

Correct Answer:AB

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVHCA0 http://live.paloaltonetworks.com//t5/image/serverpage/image-id/12862i950F549C7D4E6309

Question 40

- (Exam Topic 2)
A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck
near the User-ID agent server. Which solution in PAN-OS® software would help in this case?

A. Application override

B. Redistribution of user mappings

C. Virtual Wire mode

D. Content inspection

Correct Answer:B
https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/user-id/deploy-user-id-in-a-large-scale-network.ht

Question 41

- (Exam Topic 3)
A company.com wants to enable Application Override. Given the following screenshot:
PCNSE dumps exhibit
Which two statements are true if Source and Destination traffic match the Application Override policy? (Choose two)

A. Traffic that matches "rtp-base" will bypass the App-ID and Content-ID engines.

B. Traffic will be forced to operate over UDP Port 16384.

C. Traffic utilizing UDP Port 16384 will now be identified as "rtp-base".

D. Traffic utilizing UDP Port 16384 will bypass the App-ID and Content-ID engines.

Correct Answer:AC

Question 42

- (Exam Topic 2)
A customer wants to combine multiple Ethernet interfaces into a single virtual interface using link aggregation. Which two formats are correct for naming aggregate interfaces? (Choose two.)

A. ae.8

B. aggregate.1

C. ae.1

D. aggregate.8

Correct Answer:AC

START PCNSE EXAM