Palo Alto Networks PCNSE Quiz 23 Topic 1 Questions 111-115

Question: 1

A user's traffic traversing a Palo Alto Networks NGFW sometimes can reach http://www.company.com. At other times the session times out. The NGFW has been configured with a PBF rule that the user's traffic matches when it goes to http://www.company.com.

How can the firewall be configured automatically disable the PBF rule if the next hop goes down?

ACreate and add a Monitor Profile with an action of Wait Recover in the PBF rule in question:.

BCreate and add a Monitor Profile with an action of Fail Over in the PBF rule in question.

CEnable and configure a Link Monitoring Profile for the external interface of the firewall.

DConfigure path monitoring for the next hop gateway on the default route in the virtual router.

Show Answer

Question: 2

An administrator has been asked to configure active/passive HA for a pair of Palo Alto Networks NGFWs. The administrator assigns priority 100 to the active firewall.

Which priority is correct for the passive firewall?

A0

B99

C1

D255

Show Answer

Question: 3

An administrator pushes a new configuration from Panorama to a pair of firewalls that are configured as an active/passive HA pair. Which NGFW receives the configuration from Panorama?

AThe Passive firewall, which then synchronizes to the active firewall

BThe active firewall, which then synchronizes to the passive firewall

CBoth the active and passive firewalls, which then synchronize with each other

DBoth the active and passive firewalls independently, with no synchronization afterward

Show Answer

Question: 4

A web server is hosted in the DMZ, and the server is configured to listen for incoming connections only on TCP port 8080. A Security policy rule allowing access from the Trust zone to the DMZ zone need to be configured to enable we browsing access to the server.

Which application and service need to be configured to allow only cleartext web-browsing traffic to thins server on tcp/8080.

Aapplication: web-browsing; service: application-default

Bapplication: web-browsing; service: service-https

Capplication: ssl; service: any

Dapplication: web-browsing; service: (custom with destination TCP port 8080)

Show Answer

Question: 5

Which Captive Portal mode must be configured to support MFA authentication?

ANTLM

BRedirect

CSingle Sign-On

DTransparent

Show Answer

Palo Alto Networks PCNSE Quiz:23 Topic:1 Questions:111-115