PCNSE Practice Test

PCNSE Practice Test practice questions, page 15 of 25, with answer review and explanations.

Question 71

If an administrator does not possess a website's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic when users browse to HTTP(S) websites?

  1. SSL Forward Proxy
  2. SSL Inbound Inspection
  3. SSL Reverse Proxy
  4. SSL Outbound Inspection

Question 72

An administrator sees several inbound sessions identified as unknown-tcp in the Traffic logs. The administrator determines that these sessions are form external users accessing the company's proprietary accounting application. The administrator wants to reliably identify this traffic as their accounting application and to scan this traffic for threats. Which option would achieve this result?

  1. Create a custom App-ID and enable scanning on the advanced tab.
  2. Create an Application Override policy.
  3. Create a custom App-ID and use the ג€ordered conditionsג€ check box.
  4. Create an Application Override policy and a custom threat signature for the application.

Question 73

The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router. Which two options would help the administrator troubleshoot this issue? (Choose two.)

  1. View the System logs and look for the error messages about BGP.
  2. Perform a traffic pcap on the NGFW to see any BGP problems.
  3. View the Runtime Stats and look for problems with BGP configuration.
  4. View the ACC tab to isolate routing issues.

Question 74

An administrator has enabled OSPF on a virtual router on the NGFW. OSPF is not adding new routes to the virtual router. Which two options enable the administrator to troubleshoot this issue? (Choose two.)

  1. View Runtime Stats in the virtual router.
  2. View System logs.
  3. Add a redistribution profile to forward as BGP updates.
  4. Perform a traffic pcap at the routing stage.

Question 75

Which three firewall states are valid? (Choose three.)

  1. Active
  2. Functional
  3. Pending
  4. Passive
  5. Suspended