100% Pass Top-selling PCNSC Exams - New 2021 Palo Alto Networks Pratice Exam
Paloalto Certifications and Accreditations Dumps PCNSC Exam for Full Questions - Exam Study Guide
NEW QUESTION 37
Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?
- A. No prerequisites are required
- B. Both SSH keys and SSL certificates must be generated
- C. SSL certificates must be generated
- D. SSH keys must be manually generated
Answer: A
NEW QUESTION 38
An administrator logs in to the Palo Alto Networks NGFW and reports and reports that the WebUI is missing the policies tab. Which profile is the cause of the missing policies tab?
- A. Admin Role
- B. Authorization
- C. Authentication
- D. WebUI
Answer: A
NEW QUESTION 39
An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)
- A. file blocking
- B. antivirus
- C. NTP
- D. NAT
- E. WildFire updates
Answer: C,D,E
NEW QUESTION 40
An administrator has users accessing network resources through Citrix XenApp 7 .x. Which User-ID mapping solution will map multiple mat who using Citrix to connect to the network and access resources?
- A. Syslog Monitoring
- B. Globa1Protect
- C. Terminal Services agent
- D. Client Probing
Answer: C
NEW QUESTION 41
An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. How would the administrator establish the chain of trust?
- A. Set up multiple-factor authentication.
- B. Configure strong password
- C. Enable LDAP or RADIUS integration.
- D. Use custom certificates.
Answer: D
NEW QUESTION 42
Which feature can be configured on VM-Series firewalls'?
- A. aggregate interlaces
- B. machine learning
- C. multiple virtual systems
- D. Globallprotect
Answer: D
NEW QUESTION 43
Which feature prevents the submission of corporate login information into website forms?
- A. file blocking
- B. User-ID
- C. data filtering
- D. credential submission prevention
Answer: D
NEW QUESTION 44
Which three file types can be forward to WildMFire for analysis a part of the basic WildMFire service?
- A. .dil
- B. .apk
- C. .exe
- D. .jar
- E. .pdf
- F. .fon
Answer: B,D,E
NEW QUESTION 45
Which administrative authentication method supports authorization by an external service?
- A. SSH keys
- B. Certification
- C. LDAP
- D. RADIUS
Answer: A
NEW QUESTION 46
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?
- A. Enable all four stage of traffic capture (TX, RX, DROP, Firewall)
- B. Use the tcpdump command
- C. USe the debug dataplane packet-dia set capture stage firewall file command
- D. Use the debug dataplane packet-diag set capture stage management file command
Answer: B
NEW QUESTION 47
Which processing order will be enabled when a panorama administrator selects the setting "Objects defined in ancestors will takes higher precedence?
- A. Descendant object will take precedence over other descendant objects.
- B. Ancestor objects will have precedence over other ancestor objects.
- C. Ancestor will have precedence over descendant objects.
- D. Descendant objects, will take precedence over ancestor objects.
Answer: C
NEW QUESTION 48
An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables logs forwarding from the firewalls to panorama Pre-existing logs from the firewall are not appearing in Panorama.
Which action would enables the firewalls to send their preexisting logs to Panorama?
- A. A CLI command will forward the pre-existing logs to Panorama.
- B. Use the import option to pull logs panorama.
- C. The- log database will need to be exported from the firewall and manually imported into Panorama.
- D. Use the ACC to consolidate pre-existing logs.
Answer: A
NEW QUESTION 49
An administrator needs to optimize traffic to prefer business-critical applications over non-critical applications.
QoS natively integrates with which feature to provide service quality?
- A. Content-ID
- B. certification revocation
- C. App-ID
- D. port inspection
Answer: C
NEW QUESTION 50
How does Panorama prompt VMware NSX to quarantine an in6erface VM??
- A. Syslog Server Profile
- B. SNMP Server Profile
- C. HTTP Server Profile
- D. Email Server Profile
Answer: A
NEW QUESTION 51
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?
- A. Each firewall will have a separate floating IP. and priority will determine which firewall has the primary IP.
- B. The firewalls will share the same interface IP address, and device 1 will use the floating IP if device 0 fails.
- C. The firewall do not use floating IPs in active/active HA.
- D. The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.
Answer: A
NEW QUESTION 52
Which virtual router feature determines if a specific destination IP address is reachable'?
- A. Path Monitoring
- B. Ping-Path
- C. Heartbeat Monitoring
- D. Failover
Answer: A
NEW QUESTION 53
An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. THE update contains application that matches the same traffic signatures as the customer application.
Which application should be used to identify traffic traversing the NGFW?
- A. System longs show an application errors and signature is used.
- B. custom application
- C. downloaded application
- D. Custom and downloaded application signature files are merged and are used
Answer: B
NEW QUESTION 54
Refer to the exhibit.
A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?
- A. Untrust (any) to DMZ (10. 1. 1. 100), web browsing - Allow
- B. Untrust (any) to Untrust (10. 1.1. 100), web browsing - Allow
- C. Untrust (any) to Untrust (1. 1. 1. 100), web browsing - Allow
- D. Untrust (any) to DMZ (1. 1. 1. 100), web browsing - Allow
Answer: C
NEW QUESTION 55
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.
How would an administrator configure the interface to IGbps?
- A. set deviceconfig interface speed-duplex 1Gbs--full-duplex
- B. set deviceconfig interface speed-duplex 1Gbs--half-duplex
- C. set deviceconfig system speed-duplex 10Gbps-full-duplex
- D. set deviceconfig system speed-duplex 1Gbs--half-duplex.
Answer: D
NEW QUESTION 56
If the firewall is configured for credential phishing prevention using the "Domain Credential Filter" method, which login will be detected as credential theft?
- A. Matching any valid corporate username.
- B. Mapping to the IP address of the logged-in user.
- C. Using the name user's corporate username and password.
- D. First four letters of the username matching any valid corporate username.
Answer: B
NEW QUESTION 57
VPN traffic intended for an administrator's Palo Alto Networks NGfW is being maliciously intercepted and retransmitted by the interceptor. When Creating a VPN tunnel, which protection profile cm be enabled to prevent this malicious behavior?
- A. DoS Protection
- B. zone Protection
- C. Replay
- D. Web Application
Answer: B
NEW QUESTION 58
Which DoS protection mechanism detects and prevents session exhaustion attacks?
- A. TCP Port Scan Protection
- B. Flood Protection
- C. Pocket Based Attack Protection
- D. Resource Protection
Answer: D
NEW QUESTION 59
A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server. Which solution in PAN -OS software would help in this case?
- A. Virtual Wire mode
- B. application override
- C. content inspection
- D. redistribution of user mappings
Answer: D
NEW QUESTION 60
Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a" NO Decrypt" action? (Choose two.)
- A. Block sessions with expired certificates
- B. Block sessions with untrusted issuers
- C. Block sessions with client authentication
- D. Block sessions with unsuspected cipher suites
- E. Block credential phishing.
Answer: A,B
NEW QUESTION 61
......
Authentic Best resources for PCNSC Online Practice Exam: https://www.certkingdompdf.com/PCNSC-latest-certkingdom-dumps.html