PCNSE Paloalto-Networks Exam Questions and Free Practice Test

Question 49

- (Exam Topic 2)
Which menu item enables a firewall administrator to see details about traffic that is currently active through the NGFW?

A. App Scope

B. ACC

C. Session Browser

D. System Logs

Correct Answer:C

Question 50

- (Exam Topic 1)
When you configure an active/active high availability pair which two links can you use? (Choose two)

A. HA2 backup

B. HA3

C. Console Backup

D. HSCI-C

Correct Answer:AC

Question 51

- (Exam Topic 1)
Which User-ID mapping method should be used in a high-security environment where all IP address-to-user mappings should always be explicitly known?

A. PAN-OS integrated User-ID agent

B. LDAP Server Profile configuration

C. GlobalProtect

D. Windows-based User-ID agent

Correct Answer:A

Question 52

- (Exam Topic 3)
How does Panorama handle incoming logs when it reaches the maximum storage capacity?

A. Panorama discards incoming logs when storage capacity full.

B. Panorama stops accepting logs until licenses for additional storage space are applied

C. Panorama stops accepting logs until a reboot to clean storage space.

D. Panorama automatically deletes older logs to create space for new ones.

Correct Answer:D
(https://www.paloaltonetworks.com/documentation/60/panorama/panorama_adminguide/set-up-panorama/deter

Question 53

- (Exam Topic 3)
A network security engineer is asked to perform a Return Merchandise Authorization (RMA) on a firewall Which part of files needs to be imported back into the replacement firewall that is using Panorama?

A. Device state and license files

B. Configuration and serial number files

C. Configuration and statistics files

D. Configuration and Large Scale VPN (LSVPN) setups file

Correct Answer:A

Question 54

- (Exam Topic 1)
A traffic log might list an application as "not-applicable" for which two reasons'? (Choose two )

A. 0The firewall did not install the session

B. The TCP connection terminated without identifying any application data

C. The firewall dropped a TCP SYN packet

D. There was not enough application data after the TCP connection was established

Correct Answer:AD

START PCNSE EXAM