PCNSC

PCNSC practice questions, page 2 of 3, with answer review and explanations.

Question 6

Which are two commands required to upgrade Expedition? (Choose two.)

  1. sudo apt-get update
  2. sudo apt-get update expedition
  3. sudo apt-get upgrade all
  4. sudo apt-get install expedition-beta

Question 7

An existing customer who has deployed several Palo Alto Networks Next-Generation Firewalls would like to start using Device-ID to obtain policy rule recommendations. They have also purchased a Support license, a Threat license, a URL Filtering license, and a WildFire license for each firewall. What additional license do they need to purchase?

  1. an IoT Security license for each deployed firewall
  2. a Cortex Data Lake license
  3. an IoT Security license for the perimeter firewall
  4. an Enterprise Data Loss Prevention (DLP) license

Question 8

Instead of disabling App-IDs regularly, a security policy rule is going to be configured to temporarily allow new App-IDs. In which two circumstances is it valid to disable App-IDs as part of content update? (Choose two.)

  1. when planning to enable the App-IDs immediately
  2. when you want to immediately benefit from the latest threat prevention
  3. when an organization operates a mission-critical network and has zero tolerance for downtime
  4. when disabling facebook-base to disable all other Facebook App-IDs

Question 9

Identify the Stakeholder with their Role when planning a Firewall, Panorama, and Cortex XDR Deployment.

Question 10

In Panorama, the web interface displays the security rules in evaluation order. Organize the security rules in the order in which they will be evaluated?