PCNSE Practice Test practice questions, page 17 of 25, with answer review and explanations.
Question 81
Which processing order will be enabled when a Panorama administrator selects the setting `Objects defined in ancestors will take higher precedence?`
Descendant objects will take precedence over other descendant objects.
Descendant objects will take precedence over ancestor objects.
Ancestor objects will have precedence over descendant objects.
Ancestor objects will have precedence over other ancestor objects.
Question 82
An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors. How would the administrator establish the chain of trust?
Use custom certificates
Enable LDAP or RADIUS integration
Set up multi-factor authentication
Configure strong password authentication
Question 83
What will be the egress interface if the traffic's ingress interface is ethernet1/6 sourcing from 192.168.111.3 and to the destination 10.46.41.113 during the time shown in the image?
ethernet1/7
ethernet1/5
ethernet1/6
ethernet1/3
Question 84
Refer to the exhibit. A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?
Untrust (any) to Untrust (10.1.1.100), web browsing ג€" Allow
Untrust (any) to Untrust (1.1.1.100), web browsing ג€" Allow
Untrust (any) to DMZ (1.1.1.100), web browsing ג€" Allow
Untrust (any) to DMZ (10.1.1.100), web browsing ג€" Allow
Question 85
A web server is hosted in the DMZ and the server is configured to listen for incoming connections on TCP port 443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server hosts its contents over HTTP(S). Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule. Which combination of service and application, and order of Security policy rules, needs to be configured to allow cleartext web-browsing traffic to this server on tcp/443?