Question 271 · 610 in bank
A company is using wireless controllers to authenticate users. Which source should be used for User-ID mappings?
Palo Alto Networks Certified Network Security Engineer610 questions across 61 pages are complete and free, with no account or card.
610 questions in this bank
Free access · progress saved on this device
A company is using wireless controllers to authenticate users. Which source should be used for User-ID mappings?
A network security administrator has an environment with multiple forms of authentication. There is a network access control system in place that authenticates and restricts access for wireless users, multiple Windows domain controllers, and an MDM solution for company-provided smartphones. All of these devices have their authentication events logged. Given the information, what is the best choice for deploying User-ID to ensure maximum coverage?
Answer: B
B is the correct answer here. "To obtain user mappings from existing network services that authenticate users—such as wireless controllers, 802.1x devices, Apple Open Directory servers, proxy servers, or other Network Access Control (NAC) mechanisms—Configure User-ID to Monitor Syslog Senders for User Mapping." https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-ip-addresses-to-users
Source: Adapted from community discussion — scally
You have upgraded your Panorama and Log Collectors to 10.2.x. Before upgrading your firewalls using Panorama, what do you need do?
Which steps should an engineer take to forward system logs to email?
Answer: A
A customer has an application that is being identified as unknown-tcp for one of their custom PostgreSQL database connections. Which two configuration options can be used to correctly categorize their custom database application? (Choose two.)
Answer: AC
B and C is correct, if we are choosing C custom application then in the security policy we need to choose Custom Application.
Source: Adapted from community discussion — dhanala
An administrator discovers that a file blocked by the WildFire inline ML feature on the firewall is a false-positive action. How can the administrator create an exception for this particular file?
Answer: D
Agree D "The File Exceptions table allows you to define specific files that you do not want analyzed, such as false-positives. To create a new file exception entry, Add a new entry and provide the partial hash, filename, and description of the file that you want to exclude from enforcement." https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-web-interface-help/objects/objects-security-profiles-antivirus
Source: Adapted from community discussion — secdaddy
What can be used to create dynamic address groups?
A firewall administrator wants to avoid overflowing the company syslog server with traffic logs. What should the administrator do to prevent the forwarding of DNS traffic logs to syslog?
Answer: B
Im ok with B, but why not A? If i have a policy rule for DNS traffic, I just have to put log forwarding option as "none" to avoid sending that logs right?
Source: Adapted from community discussion — [Removed]
An administrator has configured a pair of firewalls using high availability in Active/Passive mode. Path Monitoring has been enabled with a Failure Condition of "any." A path group is configured with Failure Condition of "all" and contains a destination IP of 8.8.8.8 and 4.2.2.2 with a Ping Interval of 500ms and a Ping count of 3. Which scenario will cause the Active firewall to fail over?
Answer: B
B. 500ms interval between pings. Ping count = number of pings to lose before triggering the failure condition. 3 pings x 500ms = 1.5 seconds. At 2 seconds the failure would be initiated. 8.8.8.8 and 4.2.2.2 would have to be unreachable because because it's "all" not "any" https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-web-interface-help/device/device-high-availability/ha-link-and-path-monitoring
Source: Adapted from community discussion — sov4
A firewall administrator has been tasked with ensuring that all Panorama configuration is committed and pushed to the devices at the end of the day at a certain time. How can they achieve this?
Answer: C
Here's how this approach works: Schedule Config Push to Devices: Use the Scheduled Config Push feature to schedule the push of Panorama configurations to the managed devices. This will ensure that the configurations are pushed to the devices at the specified time. Schedule an API Call to Commit Changes: Separately schedule an API call (such as a REST API call) to commit all the changes made in Panorama. This API call should trigger the commit process in Panorama to save all configuration changes. This step should be scheduled to occur before or after the scheduled Config Push, depending on your specific workflow. This combination of scheduled Config Push and a separate API call to commit changes allows you to control and automate the process of ensuring that all configurations are committed and pushed to the devices at the desired time. It provides flexibility and control over the commit and push operations.
Source: Adapted from community discussion — electro165
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSE practice, question 271. 610 questions available.
Version 1.0.0. How we source questions