PCNSE Practice Test

PCNSE Practice Test practice questions, page 4 of 25, with answer review and explanations.

Question 16

Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OSֲ® software?

  1. XML API
  2. Port Mapping
  3. Client Probing
  4. Server Monitoring

Question 17

Decrypted packets from the website https://www.microsoft.com will appear as which application and service within the Traffic log?

  1. web-browsing and 443
  2. SSL and 80
  3. SSL and 443
  4. web-browsing and 80

Question 18

Which PAN-OSֲ® policy must you configure to force a user to provide additional credentials before he is allowed to access an internal application that contains highly-sensitive business data?

  1. Security policy
  2. Decryption policy
  3. Authentication policy
  4. Application Override policy

Question 19

A Security policy rule is configured with a Vulnerability Protection Profile and an action of `Deny`. Which action will this cause configuration on the matched traffic?

  1. The configuration is invalid. The Profile Settings section will be grayed out when the Action is set to ג€Denyג€.
  2. The configuration will allow the matched session unless a vulnerability signature is detected. The ג€Denyג€ action will supersede the per-severity defined actions defined in the associated Vulnerability Protection Profile.
  3. The configuration is invalid. It will cause the firewall to skip this Security policy rule. A warning will be displayed during a commit.
  4. The configuration is valid. It will cause the firewall to deny the matched sessions. Any configured Security Profiles have no effect if the Security policy rule action is set to ג€Denyג€.

Question 20

A user's traffic traversing a Palo Alto Networks NGFW sometimes can reach http://www.company.com. At other times the session times out. The NGFW has been configured with a PBF rule that the user's traffic matches when it goes to http://www.company.com. How can the firewall be configured automatically disable the PBF rule if the next hop goes down?

  1. Create and add a Monitor Profile with an action of Wait Recover in the PBF rule in question.
  2. Create and add a Monitor Profile with an action of Fail Over in the PBF rule in question.
  3. Enable and configure a Link Monitoring Profile for the external interface of the firewall.
  4. Configure path monitoring for the next hop gateway on the default route in the virtual router.