Palo Alto Networks >> PCNSE

Which profile is the cause of the missing

by

An administrator logs in to the Palo Alto Networks NGFW and reports that the WebUI is missing the Policies tab. Which profile is the cause of the missingPolicies tab? Question: Which profile is the cause of the missing Options: Admin Role WebUI Authentication Authorization Correct Answer The Correct Answer for this Question is Admin Role

Which configuration setting or step will allow the firewall to get automatic application signature updates?

by

An administrator has configured the Palo Alto Networks NGFW’s management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW itself.Which configuration setting or step will allow the firewall to get automatic application signature updates?:The firewall uses the service route to connect to the Update Server and … Read more

Which two options are available to identify the application?

by

The firewall identifies a popular application as an unknown-tcp. Which two options are available to identify the application? (Choose two.)Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/app-id/use-application-objects-in-policy/create-a-custom-application Question: Which two options are available to identify the application? Options: Create a custom application. Create a custom object for the custom application server to identify the custom application. Submit an Apple-ID request to … Read more

Which Security Profile type will prevent this attack?

by

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an internal system.Which Security Profile type will prevent this attack?Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface-help/objects/objects-security-profiles-vulnerability-protection Question: Which Security Profile type will prevent this attack? Options: Vulnerability Protection Anti-Spyware URL Filtering Antivirus … Read more

Which settings are published to the device when the template stack is pushed?

by

If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is pushed? Question: Which settings are published to the device when the template stack is pushed? Options: The settings assigned to the template that is on … Read more

Which option will protect the individual servers?

by

A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers.Which option will protect the individual servers? Question: Which option will protect the individual servers? Options: Enable packet buffer protection on the Zone Protection Profile. Apply an Anti-Spyware Profile with DNS sinkholing. Use the DNS App-ID with application-default. Apply a classified … Read more

Which option describes deployment of a bootstrap package in an on-premise virtual environment?

by

An administrator has been asked to create 100 virtual firewalls in a local, on-premise lab environment (not in “the cloud”). Bootstrapping is the most expedient way to perform this task.Which option describes deployment of a bootstrap package in an on-premise virtual environment?Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/management-features/bootstrapping-firewalls-for-rapiddeployment. html Question: Which option describes deployment of a bootstrap package in an … Read more

Which SSL decryption mode will allow the Palo Alto networks NGFW to inspect when users browse to HTTP(S) websites?

by

If an administrator does not possess a website’s certificate, which SSL decryption mode will allow the Palo Alto networks NGFW to inspect when users browse to HTTP(S) websites? Question: Which SSL decryption mode will allow the Palo Alto networks NGFW to inspect when users browse to HTTP(S) websites? Options: SSL Forward Proxy SSL Inbound Inspection … Read more

Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OS® software?

by

Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OS® software?:Captive Portal and the other standard user mapping methods might not work for certain types of user access. For example, the standard methods cannot add mappings of users connecting from a … Read more