PCNSE Practice Test

PCNSE Practice Test practice questions, page 16 of 25, with answer review and explanations.

Question 76

Which virtual router feature determines if a specific destination IP address is reachable?

  1. Heartbeat Monitoring
  2. Failover
  3. Path Monitoring
  4. Ping-Path

Question 77

An administrator has a requirement to export decrypted traffic from the Palo Alto Networks NGFW to a third-party, deep-level packet inspection appliance. Which interface type and license feature are necessary to meet the requirement?

  1. Decryption Mirror interface with the Threat Analysis license
  2. Virtual Wire interface with the Decryption Port Export license
  3. Tap interface with the Decryption Port Mirror license
  4. Decryption Mirror interface with the associated Decryption Port Mirror license

Question 78

When is the content inspection performed in the packet flow process?

  1. after the application has been identified
  2. before session lookup
  3. before the packet forwarding process
  4. after the SSL Proxy re-encrypts the packet

Question 79

An administrator has created an SSL Decryption policy rule that decrypts SSL sessions on any port. Which log entry can the administrator use to verify that sessions are being decrypted?

  1. In the details of the Traffic log entries
  2. Decryption log
  3. Data Filtering log
  4. In the details of the Threat log entries

Question 80

An administrator has been asked to configure a Palo Alto Networks NGFW to provide protection against external hosts attempting to exploit a flaw in an operating system on an internal system. Which Security Profile type will prevent this attack?

  1. Vulnerability Protection
  2. Anti-Spyware
  3. URL Filtering
  4. Antivirus