Palo Alto Networks Certified Network Security Engineer 6 - PCNSE6 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Where in the firewall GUI can an administrator see how many sessions of web-browsing traffic have occurred in the last day?

A. ACC->Application B. Monitor->App Scope->Summary C. Monitor->Session Browser D. Objects->Applications->web-browsing

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

A firewall administrator is troubleshooting problems with traffic passing through the Palo Alto Networks firewall.
Which method will show the global counters associated with the traffic after configuring the appropriate packet filters?

A. From the CLI, issue the show counter interface command for the ingress interface. B. From the CLI, issue the show counter global filter packet-filter yes command. C. From the GUI, select "Show global counters" under the Monitor tab. D. From the CLI, issue the show counter interface command for the egress interface.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Which feature can be configured with an IPv6 address?

A. BGP B. RIPv2 C. Static Route D. DHCP Server

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

After pushing a security policy from Panorama to a PA-3020 firewall, the firewall administrator notices that traffic logs from the PA-3020 are not appearing in Panorama's traffic logs.
What could be the problem?

A. None of the firewall's policies have been assigned a Log Forwarding profile. B. A Server Profile has not been configured for logging to this Panorama device. C. Panorama is not licensed to receive logs from this particular firewall. D. The firewall is not licensed for logging to this Panorama device.

Discussion 0

Correct Answer: A Vote an answer

Question 5

After migrating from an ASA firewall, the VPN connection between a remote network and the Palo Alto Networks firewall is not establishing correctly. The following entry is appearing in the logs:
pfs group mismatched: my:0 peer:2
Which setting should be changed on the Palo Alto Firewall to resolve this error message?

A. Update the IKE Crypto profile for the Vendor IKE gateway from group2 to no-pfs. B. Update the IPSEC Crypto profile for the Vendor IPSec Tunnel from group2 to no-pfs. C. Update the IKE Crypto profile for the Vendor IKE gateway from no-pfs to group2. D. Update the IPSEC Crypto profile for the Vendor IPSec Tunnel from no-pfs to group2.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

HOTSPOT
A company has a Palo Alto Networks firewall with a single VSYS that has both locally defined rules as well as shared and device-group rules pushed from Panorama.
In what order are the policies evaluated?

Discussion 0

Correct Answer:

Explanation:
1st: Shared Pre Rules 2nd: Device Group Pre Rules 3rd: Firewall Local Rules 4th: Device Group Post Rules 5th Shared Post Rules
Reference: https://live.paloaltonetworks.com/docs/DOC-8842