Question 421 · 610 in bank
Select 3An engineer is bootstrapping a VM-Series Firewall. Other than the /config folder, which three directories are mandatory as part of the bootstrap package directory structure? (Choose three.)
Show answer
Answer: BDE
PCNSEProfessionalPalo Alto NetworksAll questions freePage 43 of 61
PCNSE practice questions 421–430
Palo Alto Networks Certified Network Security Engineer610 questions across 61 pages are complete and free, with no account or card.
Official study references
610 questions in this bank
Free access · progress saved on this device
Question 422 · 610 in bank
A company requires the firewall to block expired certificates issued by internet-hosted websites. The company plans to implement decryption in the future, but it does not perform SSL Forward Proxy decryption at this time. Without the use of SSL Forward Proxy decryption, how is the firewall still able to identify and block expired certificates issued by internet-hosted websites?
Show answer
Question 423 · 610 in bank
A company is looking to increase redundancy in their network. Which interface type could help accomplish this?
Show answer
Answer: D
Explanation
An aggregate group increases the bandwidth between peers by load balancing traffic across the combined interfaces. It also provides redundancy https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-networking-admin/configure-interfaces/configure-an-aggregate-interface-group#id9c0f5a8b-0aad-4be5-821d-ef9d7c11a88d
Source: Adapted from community discussion — aatechler
References
Question 424 · 610 in bank
Select 2An auditor has requested that roles and responsibilities be split inside the security team. Group A will manage templates, and Group B will manage device groups inside Panorama. Which two specific firewall configurations will Group B manage? (Choose two.)
Show answer
Answer: BD
Question 425 · 610 in bank
An engineer is deploying VoIP and needs to ensure that voice traffic is treated with the highest priority on the network. Which QoS priority should be assigned to such an application?
Show answer
Answer: D
Explanation
D. Real-time priority is typically recommended for applications affected by latency, and is particularly useful in guaranteeing performance and quality of voice and video applications.
Source: Adapted from community discussion — DenskyDen
References
Question 426 · 610 in bank
Select 2A network security administrator wants to enable Packet-Based Attack Protection in a Zone Protection profile. What are two valid ways to enable Packet-Based Attack Protection? (Choose two.)
Show answer
Answer: AB
Explanation
AB Network > Network Profiles > Zone Protection > Packet Based Attack Protection You can configure Packet Based Attack protection to drop the following types of packets: IP Drop TCP Drop ICMP Drop IPv6 Drop ICMPv6 Drop
Source: Adapted from community discussion — mohr22
References
Question 427 · 610 in bank
Given the following snippet of a WildFire submission log, did the end-user get access to the requested information and why or why not?
Show answer
Answer: B
Explanation
As long as the action is set to allow, then it will still allow it. Threats that have the ability to become critical but have mitigating factors; for example, they may be difficult to exploit, do not result in elevated privileges, or do not have a large victim pool. WildFire Submissions log entries with a malicious verdict and an action set to allow are logged as High. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/view-and-manage-logs/log-types-and-severity-levels/threat-logs#id5cea1511-a153-4005-9d5f-ab2482e838ae
Source: Adapted from community discussion — DenskyDen
Question 428 · 610 in bank
A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers. Which option will protect the individual servers?
Show answer
Answer: D
Explanation
Correct is D They want to protect just one specific server, if you apply the zone protection you are protecting the entire zone
Source: Adapted from community discussion — Edu147
Question 429 · 610 in bank
The decision to upgrade to PAN-OS 10.2 has been approved. The engineer begins the process by upgrading the Panorama servers, but gets an error when trying to install. When performing an upgrade on Panorama to PAN-OS 10.2, what is the potential cause of a failed install?
Show answer
Answer: B
Explanation
Answer is B (outdated plugins). ... https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-upgrade/upgrade-panorama-plugins/panorama-plugins-upgrade-downgrade-considerations Before you upgrade to PAN-OS 11.0, you must download the Panorama plugin version supported on PAN-OS 11.0 for all plugins installed on Panorama. This is required to successfully upgrade to PAN-OS 11.0. See the Compatibility Matrixfor more information.
Source: Adapted from community discussion — djedeen
Question 430 · 610 in bank
How can Panorama help with troubleshooting problems such as high CPU or resource exhaustion on a managed firewall?
Show answer
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSE practice, question 421. 610 questions available.
About this question bank
Version 1.0.0. How we source questions