Palo Alto Networks Certified Network Security Engineer - PCNSE FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

When backing up and saving configuration files, what is achieved using only the firewall and is not available in Panorama?

A. Export device state B. Save candidate config C. Load configuration version D. Load named configuration snapshot

Discussion 0

Correct Answer: A Vote an answer

Question 2

An enterprise Information Security team has deployed policies based on AD groups to restrict user access to critical infrastructure systems. However, a recent phishing campaign against the organization has prompted Information Security to look for more controls that can secure access to critical assets. For users that need to access these systems. Information Security wants to use PAN-OS multi-factor authentication (MFA) integration to enforce MFA.
What should the enterprise do to use PAN-OS MFA?

A. Configure a Captive Portal authentication policy that uses an authentication profile that references a RADIUS profile. B. Use a Credential Phishing agent to detect, prevent, and mitigate credential phishing campaigns. C. Configure a Captive Portal authentication policy that uses an authentication sequence. D. Create an authentication profile and assign another authentication factor to be used by a Captive Portal authentication policy.

Discussion 0

Correct Answer: D Vote an answer

Question 3

While troubleshooting an issue, a firewall administrator performs a packet capture with a specific filter. The administrator sees drops for packets with a source IP address of 10.1.1.1.
How can the administrator further investigate these packet drops by looking at the global counters for this packet capture filter?

A. > debug dataplane packet-diag set capture stage drop B. > show counter global filter severity drop C. > show counter global filter packet-filter yes delta yes D. > show counter global filter delta yes I match 10.1.1-1

Discussion 0

Correct Answer: C Vote an answer

Question 4

How can a firewall engineer bypass App-ID and content inspection features on a Palo Alto Networks firewall when troubleshooting?

A. Create a custom application, define its properties and signatures, and ensure all scanning options in the
"Advanced" tab are unchecked B. Create a new security rule specifically for the affected traffic, and select "Disable Server Response Inspection" C. Create a new security rule specifically for the affected traffic, but do not reference any Security Profiles inside the rule D. Create a custom application, define its properties, then create an application override and reference the custom application

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

What can be used as an Action when creating a Policy-Based Forwarding (PBF) policy?

A. Deny B. Allow C. Next VR D. Discard

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

A company needs to preconfigure firewalls to be sent to remote sites with the least amount of reconfiguration.
Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to the future site?

A. Preconfigured IPsec tunnels B. Preconfigured PPTP Tunnels C. Preconfigured GlobalProtect satellite D. Preconfigured GlobalProtect client

Discussion 0

Correct Answer: C Vote an answer

Question 7

An administrator is attempting to create policies tor deployment of a device group and template stack. When creating the policies, the zone drop down list does not include the required zone.
What must the administrator do to correct this issue?

A. Add the template as a reference template in the device group B. Specify the target device as the master device in the device group C. Enable "Share Unused Address and Service Objects with Devices" in Panorama settings D. Add a firewall to both the device group and the template

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

An administrator has been tasked with configuring decryption policies,
Which decryption best practice should they consider?

A. Decrypt all traffic that traverses the firewall so that it can be scanned for threats. B. Create forward proxy decryption rules without Decryption profiles for unsanctioned applications. C. Place firewalls where administrators can opt to bypass the firewall when needed. D. Consider the local, legal, and regulatory implications and how they affect which traffic can be decrypted.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

An administrator wants to use LDAP, TACACS+, and Kerberos as external authentication services for authenticating users. What should the administrator be aware of regarding the authentication sequence, based on the Authentication profile in the order Kerberos LDAP, and TACACS+?

A. The firewall evaluates the profiles in top-to-bottom order until one Authentication profile successfully authenticates the user. B. The firewall evaluates the profiles in the alphabetical order the Authentication profiles have been named until one profile successfully authenticates the user. C. The priority assigned to the Authentication profile defines the order of the sequence. D. If the authentication times cut for the firs: Authentication profile in the authentication sequence, no further authentication attempts will be made.

Discussion 0

Correct Answer: A Vote an answer