Palo Alto Networks Certified Network Security Engineer610 questions across 61 pages are complete and free, with no account or card.
610 questions in this bank
Free access · progress saved on this device
Which configuration is backed up using the Scheduled Config Export feature in Panorama?
Answer: A
A To schedule an export of all the running configurations on Panorama and firewalls, Add an export task and configure the settings as described in the following table.
Source: Adapted from community discussion — confusion
While analyzing the Traffic log, you see that some entries show "unknown-tcp" in the Application column. What best explains these occurrences?
Answer: A
You have upgraded Panorama to 10.2 and need to upgrade six Log Collectors. When upgrading Log Collectors to 10.2, you must do what?
Answer: C
You must upgrade all Log Collectors in a collector group at the same time to avoid losing log data https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/upgrade-panorama/deploy-updates-to-firewalls-log-collectors-and-wildfire-appliances-using-panorama/deploy-an-update-to-log-collectors-when-panorama-is-internet-connected
Source: Adapted from community discussion — millosz222
A firewall administrator has been tasked with ensuring that all Panorama-managed firewalls forward traffic logs to Panorama. In which section is this configured?
Answer: B
Create a Log Forwarding profile. The profile defines the destinations for Traffic, Threat, WildFire Submission, URL Filtering, Data Filtering, Tunnel and Authentication logs. Select Objects > Log Forwarding, select the Device Group of the firewalls that will forward logs, and Add a profile.
Source: Adapted from community discussion — djedeen
An engineer is pushing configuration from Panorama to a managed firewall. What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?
Answer: B
https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/plan-the-transition-to-panorama-management A - If a shared firewall object has the same name and value as an existing shared Panorama object, the import excludes that firewall object.
Source: Adapted from community discussion — DrNick0
An administrator logs in to the Palo Alto Networks NGFW and reports that the WebUI is missing the Policies tab. Which profile is the cause of the missing Policies tab?
Answer: A
Typical malicious PANW test question using obscure terms. What does the word "Profile" have to do with anything here? The answer is "Admin Role"...
Source: Adapted from community discussion — Pretorian
Which Panorama feature protects logs against data loss if a Panorama server fails?
Answer: A
A is correct as per url above. "Log redundancy is available only if each Log Collector has the same number of logging disks." (Recommended) Enable log redundancy across collectors if you are adding multiple Log Collectors to a single Collector group. Redundancy ensures that no logs are lost if any one Log Collector becomes unavailable. Each log will have two copies and each copy will reside on a different Log Collector. For example, if you have two Log Collectors in the collector group the log is written to both Log Collectors. Enabling redundancy creates more logs and therefore requires more storage capacity, reducing storage capability in half. When a Collector Group runs out of space, it deletes older logs. Redundancy also doubles the log processing traffic in a Collector Group, which reduces its maximum logging rate by half, as each Log Collector must distribute a copy of each log it receives.
Source: Adapted from community discussion — Alen
A network administrator troubleshoots a VPN issue and suspects an IKE Crypto mismatch between peers. Where can the administrator find the corresponding logs after running a test command to initiate the VPN?
Answer: B
An administrator is required to create an application-based Security policy rule to allow Evernote. The Evernote application implicitly uses SSL and web browsing. What is the minimum the administrator needs to configure in the Security rule to allow only Evernote?
Answer: D
implicitly: depend on other applications but you don't need to allow it. explicitly: you need to allow the other application it depends on to work as expected [add it to the same rule.] https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClV0CAK
Source: Adapted from community discussion — Nawda
Which Panorama mode should be used so that all logs are sent to, and only stored in, Cortex Data Lake?
Answer: B
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSE practice, question 281. 610 questions available.
Version 1.0.0. How we source questions