Updated Feb-2022 Exam PCNSC Dumps - Pass Your Certification Exam
Latest Real Palo Alto Networks PCNSC Exam Dumps Questions
NEW QUESTION 44
What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?
- A. An administrator must use the Expedition tool to adapt the configuration to the pre-pan-OS 8.1 state.
- B. Administrators need to manually update variable characters to those to used in pre-PAN-OS 8.1.
- C. When Panorama is reverted to an earlier PAN-OS release, variable used in template stacks will be removed authentically.
- D. Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or stacks.
Answer: D
NEW QUESTION 45
Which two options prevents the firewall from capturing traffic passing through it? (Choose two.)
- A. The firewall is in milti-vsys mode.
- B. The traffic does not match the packet capture filter
- C. The traffic is offloaded.
- D. The firewall's DP CPU is higher than 50%
Answer: B,C
NEW QUESTION 46
Which three file types can be forward to WildMFire for analysis a part of the basic WildMFire service?
- A. .exe
- B. .pdf
- C. .fon
- D. .dil
- E. .jar
- F. .apk
Answer: B,E,F
NEW QUESTION 47
When is the content inspection performed in the packet flow process?
- A. after the SSL Proxy re-encrypts the packet
- B. after the application has been identified
- C. before session lookup
- D. before the packet forwarding process
Answer: B
NEW QUESTION 48
A Company needs to preconfigured firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to Hie future site?
- A. preconfigured iPsec tunnels
- B. preconfigured PPTP Tunnels
- C. preconfigured GlobalProtcet client
- D. preconfigured GlobalProtcet satellite
Answer: D
NEW QUESTION 49
Which processing order will be enabled when a panorama administrator selects the setting "Objects defined in ancestors will takes higher precedence?
- A. Descendant objects, will take precedence over ancestor objects.
- B. Ancestor will have precedence over descendant objects.
- C. Ancestor objects will have precedence over other ancestor objects.
- D. Descendant object will take precedence over other descendant objects.
Answer: B
NEW QUESTION 50
A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?
- A. Define a custom App-ID to ensure that only legitimate application traffic reaches the server
- B. Add QoS Profiles to throttle incoming requests.
- C. Add a DoS Protection Profile with defined session count.
- D. Add a Vulnerability Protection Profile to block the attack.
Answer: C
NEW QUESTION 51
Which feature can be configured on VM-Series firewalls'?
- A. aggregate interlaces
- B. machine learning
- C. Globallprotect
- D. multiple virtual systems
Answer: C
NEW QUESTION 52
Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)
- A. Configure an EDL to pull IP Addresses of known sites resolved from a CRL.
- B. Configure a Dynamic Address Group for untrusted sites.
- C. Create a Security Policy rule with vulnerability Security Profile attached.
- D. Enable the "Block seasons with untrusted Issuers- setting.
- E. Create a no-decrypt Decryption Policy rule.
Answer: C,D
NEW QUESTION 53
View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?
- A. It forces the firewall to perform a dynamic DNS update, Which adds the internal gateway's hostname and IP address to the DNS server.
- B. It forces an internal client to connect to an internal gateway at IP address 192 168 10 I.
- C. It enables a Client to perform a reverse DNS lookup on 192 .168. 10 .1. to delect it is an internal client.
- D. It configures the tunnel address of all internal clients lo an IP address range starting at 192 168 10 1.
Answer: C
NEW QUESTION 54
An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables logs forwarding from the firewalls to panorama Pre-existing logs from the firewall are not appearing in Panorama.
Which action would enables the firewalls to send their preexisting logs to Panorama?
- A. A CLI command will forward the pre-existing logs to Panorama.
- B. The- log database will need to be exported from the firewall and manually imported into Panorama.
- C. Use the import option to pull logs panorama.
- D. Use the ACC to consolidate pre-existing logs.
Answer: A
NEW QUESTION 55
Which method will dynamically register tags on the Palo Alto Networks NGFW?
- A. XML API or the VMware API on the firewall on the User-ID agent or the CLI
- B. Restful API or the VMware API on the firewall or on the User.-D agent or the ready -only domain controller
- C. Restful API or the VMware API on the firewall or on the User-ID Agent
- D. XML- API or lite VM Monitoring agent on the NGFW or on the User- ID agent
Answer: D
NEW QUESTION 56
A Palo Alto Networks NGFW just submitted a file lo WildFire tor analysis Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.
How quickly will the firewall receive back a verdict?
- A. 10 to 15 minutes
- B. More than 15 minutes
- C. 5 to 10 minutes
- D. 5 minutes
Answer: C
NEW QUESTION 57
What will be the egress interface if the traffic's ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.
- A. ethernet 1/7
- B. ethernet 1/3
- C. ethernet 1/5
- D. ethernet 1/6
Answer: B
NEW QUESTION 58
An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. How would the administrator establish the chain of trust?
- A. Use custom certificates.
- B. Configure strong password
- C. Set up multiple-factor authentication.
- D. Enable LDAP or RADIUS integration.
Answer: A
NEW QUESTION 59
Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)
- A. SAML
- B. TACACS+
- C. PAP
- D. LDAP
- E. RADIUS
- F. Kerberos
Answer: B,D,E
NEW QUESTION 60
An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?
- A. Security policy rule allowing SSL to the target server
- B. importation of a certificate from an HSM
- C. firewall connectivity to a CRL
- D. Root certificate imported into the firewall with "Trust" enabled
Answer: A
NEW QUESTION 61
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)
- A. Antivirus
- B. Application and Threats
- C. Content-ID
- D. User-ID
Answer: A,B
NEW QUESTION 62
What are two benefits of nested device groups in panorama? (Choose two )
- A. requires configuration both function and location for every device
- B. overwrites local firewall configuration
- C. all device groups inherit setting from the Shared group
- D. reuse of the existing Security policy rules and objects
Answer: A,C
NEW QUESTION 63
Which three options are supposed in HA Lite? (Choose three.)
- A. Configuration synchronization
- B. session synchronization
- C. synchronization of IPsec security associations
- D. Virtual link
- E. active/passive deployment
Answer: A,C,E
NEW QUESTION 64
......
PCNSC Dumps To Pass Paloalto Certifications and Accreditations Exam in One Day : https://www.certkingdompdf.com/PCNSC-latest-certkingdom-dumps.html