Palo Alto Networks Certified Network Security Engineer610 questions across 61 pages are complete and free, with no account or card.
610 questions in this bank
Free access · progress saved on this device
Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?
Answer: A
Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/configure-user-mapping-for-terminal-server-users
Which feature can be configured on VM-Series firewalls?
In High Availability, which information is transferred via the HA data link?
The firewall identifies a popular application as an unknown-tcp. Which two options are available to identify the application? (Choose two.)
Answer: AC
The statement says "The firewall identifies a popular application as an unknown-tcp". It doesn't say traffic is being dropped. If it identifies it, that means a rule is already in place. It also says popular, and as per https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/app-id/manage-custom-or-unknown-applications#, "...If the packet capture reveals that the application is a commercial application, you can submit this packet capture to Palo Alto Networks for App-ID development...". Commercial equates to popular. I say AC
Source: Adapted from community discussion — ochc
If an administrator wants to decrypt SMTP traffic and possesses the server's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?
Answer: B
The answer is B, there are three types of decryption (excluding a no-decrypt' rule) that one can use on the PA: 1. SSL Forward Proxy - Inside to Outside (To the the internet) 2. SSL Inbound Proxy - Outside to Inside (usually towards a hosted webserver in your net) 3. SSH Forward Proxy - As is states, for SSH traffic. The important one to remember for this type of decryption is that no certs are required.
Source: Adapted from community discussion — Biz90
A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?
Which two methods can be used to verify firewall connectivity to AutoFocus? (Choose two.)
Answer: AB
A seems possible if one has the destination IP information but would only check L3/L4 Why not B? For example the autofocus dashboard alerts widget which presumably wouldn't have any alerts if the firewall were not connected to autofocus? https://docs.paloaltonetworks.com/autofocus/autofocus-admin/autofocus-alerts/view-alerts-in-autofocus#id988b3d9f-7526-4ec6-9ece-e7e4e70b6156 C these logs are presumably not visible to us as they're PAN cloud to PAN cloud? D seems this would only confirm firewall to portal connectivity for license activation E doesn't check connectivity Overall a poorly worded question. I agree DE are steps to connecting and are maybe best but maybe AB are possible to actually 'verify connectivity' ?
Source: Adapted from community discussion — secdaddy
Which CLI command enables an administrator to check the CPU utilization of the dataplane?
Answer: A
A is the correct answer. 'show running resource-monitor' shows Dataplane CPU statistics 'show system resources [follow]' shows Management CPU statistics
Source: Adapted from community discussion — trashboat
Which DoS protection mechanism detects and prevents session exhaustion attacks?
Answer: C
Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/zone-protection-and-dos-protection/zone-defense/dos-protection-profiles-and- policy-rules/dos-protection-profiles
Source: Adapted from community discussion — GivemeMoney
Which two subscriptions are available when configuring Panorama to push dynamic updates to connected devices? (Choose two.)
Answer: CD
Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/device/device-dynamic-updates
Source: Adapted from community discussion — myname_1
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
PCNSE practice, question 601. 610 questions available.
Version 1.0.0. How we source questions