PCNSE Practice Test practice questions, page 13 of 25, with answer review and explanations.
Question 61
Which CLI command can be used to export the tcpdump capture?
scp export tcpdump from mgmt.pcap to < username@host:path>
scp extract mgmt-pcap from mgmt.pcap to < username@host:path>
scp export mgmt-pcap from mgmt.pcap to < username@host:path>
download mgmt-pcap
Question 62
An administrator has configured the Palo Alto Networks NGFW's management interface to connect to the internet through a dedicated path that does not traverse back through the NGFW itself. Which configuration setting or step will allow the firewall to get automatic application signature updates?
A scheduler will need to be configured for application signatures.
A Security policy rule will need to be configured to allow the update requests from the firewall to the update servers.
A Threat Prevention license will need to be installed.
A service route will need to be configured.
Question 63
Which three options are supported in HA Lite? (Choose three.)
Virtual link
Active/passive deployment
Synchronization of IPsec security associations
Configuration synchronization
Session synchronization
Question 64
Which CLI command enables an administrator to view details about the firewall including uptime, PAN-OSֲ® version, and serial number?
debug system details
show session info
show system info
show system details
Question 65
During the packet flow process, which two processes are performed in application identification? (Choose two.)