Palo Alto Networks PCNSE Quiz 61 Topic 10 Questions 301-305

Question: 1

Several offices are connected with VPNs using static IPv4 routes. An administrator has been tasked with implementing OSPF to replace static routing.

Which step is required to accomplish this goal?

AAssign an IP address on each tunnel interface at each site

BEnable OSPFv3 on each tunnel interface and use Area ID 0.0.0.0

CAssign OSPF Area ID 0.0.0.0 to all Ethernet and tunnel interfaces

DCreate new VPN zones at each site to terminate each VPN connection

Show Answer

Question: 2

A firewall administrator has completed most of the steps required to provision a standalone Palo Alto Networks Next-Generation Firewall. As a final step, the administrator wants to test one of the security policies.

Which CLI command syntax will display the rule that matches the test?

Atest security -policy- match source <ip_address> destination <IP_address> destination port protocol

Bshow security rule source <ip_address> destination <IP_address> destination port protocol

Ctest security rule source <ip_address> destination <IP_address> destination port protocol

Dshow security-policy-match source <ip_address> destination <IP_address> destination port protocol
test security-policy-match source

Show Answer

Question: 3

A Network Administrator wants to deploy a Large Scale VPN solution. The Network Administrator has chosen a GlobalProtect Satellite solution. This configuration needs to be deployed to multiple remote offices and the Network Administrator decides to use Panorama to deploy the configurations.

How should this be accomplished?

ACreate a Template with the appropriate IKE Gateway settings

BCreate a Template with the appropriate IPSec tunnel settings

CCreate a Device Group with the appropriate IKE Gateway settings

DCreate a Device Group with the appropriate IPSec tunnel settings

Show Answer

Question: 4

Which GlobalProtect gateway setting is required to enable split-tunneling by access route, destination domain, and application?

ANo Direct Access to local networks

BSatellite mode

CTunnel mode

DIPSec mode

Show Answer

Question: 5

Which two firewall components enable you to configure SYN flood protection thresholds? (Choose two)

ADos Protection policy

BQoS Profile

CZone Protection Profile

DDoS Protection Profile

Show Answer

Palo Alto Networks PCNSE Quiz:61 Topic:10 Questions:301-305