PCNSE practice questions 61–70

1. Question 61 · 610 in bank

   Select 2

   Which two are valid ACC GlobalProtect Activity tab widgets? (Choose two.)

   • ASuccessful GlobalProtect Deployed Activity
   • BGlobalProtect Deployment Activity
   • CSuccessful GlobalProtect Connection Activity
   • DGlobalProtect Quarantine Activity

   Show answer

   Answer: BC

   Explanation

   answer is BC https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/globalprotect-features/enhanced-logging-for-globalprotect.html The ACC displays a graphical view of user activity in your GlobalProtect deployment on the GlobalProtect Activity tab. The following charts are available: *Successful GlobalProtect Connection Activity *Unsuccessful GlobalProtect Connection Activity *GlobalProtect Deployment Activity

   Source: Adapted from community discussion — ocaljotqyznqbhykev

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

2. Question 62 · 610 in bank

   Select 2

   Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

   • Alog forwarding auto-tagging
   • BXML API
   • CGlobalProtect agent
   • DUser-ID Windows-based agent

   Show answer

   Answer: AB

   Explanation

   From the PCNSE study guide, Dynamic User Groups (page 106): Usernames also can be tagged and untagged using the autotagging feature in a Log Forwarding Profile. You also can program another utility to invoke PAN-OS XML API commands to tag or untag usernames. In the web interface you can use logical AND or OR operators with the tags to better filter or match against. You can configure a timeout value that determines when a username will be untagged automatically. Based on that paragraph, A&B are the correct answers.

   Source: Adapted from community discussion — PuckinWebGuy

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

3. Question 63 · 610 in bank

   Select 2

   SD-WAN is designed to support which two network topology types? (Choose two.)

   • Apoint-to-point
   • Bhub-and-spoke
   • Cfull-mesh
   • Dring

   Show answer

   Answer: BC

   Explanation

   SD-WAN supports a full mesh topology, in addition to the hub-spoke topology. The mesh can consist of branches with or without hubs. Use full mesh when the branches need to communicate with each other directly. https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-new-features/sd-wan-features/sd-wan-full-mesh-vpn-cluster-with-ddns-service.html BC

   Source: Adapted from community discussion — jordan_gsi

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

4. Question 64 · 610 in bank

   Which option describes the operation of the automatic commit recovery feature?

   • AIt enables a firewall to revert to the previous configuration if rule shadowing is detected.
   • BIt enables a firewall to revert to the previous configuration if application dependency errors are found.
   • CIt enables a firewall to revert to the previous configuration if a commit causes HA partner connectivity failure.
   • DIt enables a firewall to revert to the previous configuration if a commit causes Panorama connectivity failure.

   Show answer

   Answer: D

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

5. Question 65 · 610 in bank

   Select 3

   Which three items are important considerations during SD-WAN configuration planning? (Choose three.)

   • Abranch and hub locations
   • Blink requirements
   • Cthe name of the ISP
   • DIP Addresses

   Show answer

   Answer: ABD

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

6. Question 66 · 610 in bank

   Which User-ID method maps IP addresses to usernames for users connecting through an 802.1x-enabled wireless network device that has no native integration with PAN-OSֲ® software?

   • AXML API
   • BPort Mapping
   • CClient Probing
   • DServer Monitoring

   Show answer

   Answer: A

   Explanation

   it looks like the docs have changed and are more clear now. XML API seems to be the right answer in this case, otherwise syslog could be possible too but that is not an anwer here. Server monitoring is not right because it assumes you are using some kind of AD server. Answer: A

   Source: Adapted from community discussion — mtberdaan

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

7. Question 67 · 610 in bank

   Select 2

   Starting with PAN-OS version 9.1, application dependency information is now reported in which two locations? (Choose two.)

   • Aon the App Dependency tab in the Commit Status window
   • Bon the Policy Optimizer's Rule Usage page
   • Con the Application tab in the Security Policy Rule creation window
   • Don the Objects > Applications browser pages

   Show answer

   Answer: AC

   Explanation

   D its not possible "D. on the Objects > Applications browser pages", you can see the depends it by clicking on the application not in the app browser

   Source: Adapted from community discussion — tenebrox

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

8. Question 68 · 610 in bank

   Select 2

   Which two events trigger the operation of automatic commit recovery? (Choose two.)

   • Awhen an aggregate Ethernet interface component fails
   • Bwhen Panorama pushes a configuration
   • Cwhen a firewall performs a local commit
   • Dwhen a firewall HA pair fails over

   Show answer

   Answer: BC

   Explanation

   Automatic commit recovery allows you to configure the firewall to attempt a specified number of connectivity tests after: 1- you push a configuration from Panorama or 2- commit a configuration change locally on the firewall. Additionally, the firewall checks connectivity to Panorama every hour to ensure consistent communication in the event unrelated network configuration changes have disrupted connectivity between the firewall and Panorama or if implications to a pushed committed configuration may have affected connectivity.

   Source: Adapted from community discussion — MyWil

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

9. Question 69 · 610 in bank

   Select 2

   Panorama provides which two SD-WAN functions? (Choose two.)

   • Anetwork monitoring
   • Bcontrol plane
   • Cdata plane
   • Dphysical network links

   Show answer

   Answer: AB

   Explanation

   The question is Panorama which provides management (control plane) and also provide visibility (network monitoring). Answer for me is A&B.

   Source: Adapted from community discussion — sethjam

   References

   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation
   • docs.paloaltonetworks.com documentation

   Next question

10. Question 70 · 610 in bank

    Updates to dynamic user group membership are automatic therefore using dynamic user groups instead of static group objects allows you to:

    • Arespond to changes in user behaviour or potential threats using manual policy changes
    • Brespond to changes in user behaviour or potential threats without manual policy changes
    • Crespond to changes in user behaviour or potential threats without automatic policy changes
    • Drespond to changes in user behaviour and confirmed threats with manual policy changes

    Show answer

    Answer: B

    References

    • docs.paloaltonetworks.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCNSE practice, question 61. 610 questions available.