Palo Alto Networks Certified Network Security Engineer610 questions across 61 pages are complete and free, with no account or card.
610 questions in this bank
Free access · progress saved on this device
An administrator needs to optimize traffic to prefer business-critical applications over non-critical applications. QoS natively integrates with which feature to provide service quality?
Answer: D
asn :D-The Palo Alto Networks firewall provides this capability by integrating the features App-ID and User-ID with the QoS configuration
Source: Adapted from community discussion — yashishinde
Given the following snippet of a WildFire submission log, did the end-user get access to the requested information and why or why not?
Answer: B
Here are my thoughts, but I don't have a wildfire license so I cannot confirm in the lab: 1. From https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/monitor-wildfire-activity/about-wildfire-logs-and-reporting - we learn that the action column tells us whether the firewall allowed or blocked the file. So the file was not blocked by the firewall (either allow or alert). Keep in mind that the wildfire submission and verdict doesn't happen in real time, so the action cannot be determined by verdict as this is at least 5 minutes later. 2. Which rows in the image apply to the question? I *think* that the last 2 'type = file' are not relevant, not sure if they are even wildfire items, so this leaves the the 5 'wildfire' rows each with action=allow. 3. I also *think* that files with an earlier verdict of malicious would have found their way into the virus pattern database.
Source: Adapted from community discussion — djedeen
Which statement is true regarding a Best Practice Assessment?
Answer: C
Option C The Best Practice Assessment (BPA) tool compares the configuration of firewalls and Panorama to the Palo Alto Networks best practice recommendations. Run the BPA periodically to identify security weaknesses, see the best practice settings, and implement them to improve your security posture. https://docs.paloaltonetworks.com/best-practices/10-2/bpa-getting-started
Source: Adapted from community discussion — awtsuritacuna
What are three important considerations during SD-WAN configuration planning? (Choose three.)
Answer: ABE
Step one of the Plan your SD-WAN config is, "Plan the branch and hub locations, link requirements, and IP addresses. From Panorama you will export an empty SD-WAN device CSV and populate it with branch and hub information." Plan the branch and hub locations, link requirements, and IP addresses. From Panorama you will export an empty SD-WAN device CSV and populate it with branch and hub information.
Source: Adapted from community discussion — scally
A standalone firewall with local objects and policies needs to be migrated into Panorama. What procedure should you use so Panorama is fully managing the firewall?
Answer: A
When you navigate to Network > GlobalProtect > Portals > Agent > (config) > App and look in the Connect Method section, which three options are available? (Choose three.)
Answer: ACD
An administrator has configured PAN-OS SD-WAN and has received a request to find out the reason for a session failover for a session that has already ended. Where would you find this in Panorama or firewall logs?
Answer: D
I believe the answer here is D. Traffic logs. Refer to the documentation link below, you can see that the link switches, and all SD-WAN cluster logs are found in the firewalls traffic logs. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/traffic-log-fields#idbe18d2d4-9eb8-4966-bec8-df3a6de70e66
Source: Adapted from community discussion — west33637
Where is information about packet buffer protection logged?
Answer: D
D. The firewall records alert events in the System log, and records events for dropped traffic, discarded sessions, and blocked IP address in the Threat log. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/zone-protection-and-dos-protection/configure-zone-protection-to-increase-network-security/configure-packet-buffer-protection
Source: Adapted from community discussion — DenskyDen
SSL Forward Proxy decryption is configured, but the firewall uses Untrusted-CA to sign the website https://www.important-website.com certificate. End-users are receiving the "security certificate is not trusted" warning. Without SSL decryption, the web browser shows that the website certificate is trusted and signed by a well-known certificate chain: Well-Known-Intermediate and Well-Known-Root-CA. The network security administrator who represents the customer requires the following two behaviors when SSL Forward Proxy is enabled: 1. End-users must not get the warning for the https://www.very-important-website.com/ website 2. End-users should get the warning for any other untrusted website Which approach meets the two customer requirements?
Answer: C
A: Fixes requirement 1 but doesn't meet requirement 2. B: Wouldn't fix the issue as the firewall would still be exposing the forward trust cert to the users (signed by FW or or enterprise PKI) C: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-certificate-management-certificates/manage-default-trusted-certificate-authorities D: No such method to import certs exists.
Source: Adapted from community discussion — McDrudge
An administrator needs to evaluate a recent policy change that was committed and pushed to a firewall device group. How should the administrator identify the configuration changes?
Answer: A
Configuration log Displays an entry for each configuration change. Each entry includes the date and time, the administrator username, the IP address from where the change was made, the type of client (web interface or CLI), the type of command executed, whether the command succeeded or failed, the configuration path, and the values before and after the change. https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/monitor/monitor-logs/log-types
Source: Adapted from community discussion — Gabuu
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSE practice, question 221. 610 questions available.
Version 1.0.0. How we source questions