PCNSE Practice Test

PCNSE Practice Test practice questions, page 19 of 25, with answer review and explanations.

Question 91

Which feature can be configured on VM-Series firewalls?

  1. aggregate interfaces
  2. machine learning
  3. multiple virtual systems
  4. GlobalProtect

Question 92

In High Availability, which information is transferred via the HA data link?

  1. session information
  2. heartbeats
  3. HA state information
  4. User-ID information

Question 93

The firewall identifies a popular application as an unknown-tcp. Which two options are available to identify the application? (Choose two.)

  1. Create a custom application.
  2. Create a custom object for the custom application server to identify the custom application.
  3. Submit an App-ID request to Palo Alto Networks.
  4. Create a Security policy to identify the custom application.

Question 94

If an administrator wants to decrypt SMTP traffic and possesses the server's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?

  1. TLS Bidirectional Inspection
  2. SSL Inbound Inspection
  3. SSH Forward Proxy
  4. SMTP Inbound Decryption

Question 95

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?

  1. Define a custom App-ID to ensure that only legitimate application traffic reaches the server.
  2. Add a Vulnerability Protection Profile to block the attack.
  3. Add QoS Profiles to throttle incoming requests.
  4. Add a DoS Protection Profile with defined session count.