PCNSE Practice Test practice questions, page 22 of 25, with answer review and explanations.
Question 106
VPN traffic intended for an administrator's firewall is being maliciously intercepted and retransmitted by the interceptor. When creating a VPN tunnel, which protection profile can be enabled to prevent this malicious behavior?
Zone Protection
Replay
Web Application
DoS Protection
Question 107
Which Zone Pair and Rule Type will allow a successful connection for a user on the Internet zone to a web server hosted on the DMZ zone? The web server is reachable using a Destination NAT policy in the Palo Alto Networks firewall. A. B. C. D.
Question 108
An administrator has configured a QoS policy rule and a QoS Profile that limits the maximum allowable bandwidth for the YouTube application. However, YouTube is consuming more than the maximum bandwidth allotment configured. Which configuration step needs to be configured to enable QoS?
Enable QoS interface
Enable QoS in the Interface Management Profile
Enable QoS Data Filtering Profile
Enable QoS monitor
Question 109
Which log file can be used to identify SSL decryption failures?
Traffic
ACC
Configuration
Threats
Question 110
A customer wants to set up a site-to-site VPN using tunnel interfaces. Which two formats are correct for naming tunnel interfaces? (Choose two.)