Palo Alto Networks PCNSE Quiz 64 Topic 12 Questions 316-320

Question: 1

Which CLI command displays the current management plane memory utilization?

A> debug management-server show

B> show running resource-monitor

C> show system info

D> show system resources

Show Answer

Question: 2

Which three rule types are available when defining policies in Panorama? (Choose three.)

APre Rules

BPost Rules

CDefault Rules

DStealth Rules

EClean Up Rules

Show Answer

Question: 3

Which CLI command displays the current management plan memory utilization?

A> show system info

B> show system resources

C> debug management-server show

D> show running resource-monitor

Show Answer

Question: 4

A network security engineer has a requirement to allow an external server to access an internal web server. The internal web server must also initiate connections with the external server.

What can be done to simplify the NAT policy?

AConfigure ECMP to handle matching NAT traffic

BConfigure a NAT Policy rule with Dynamic IP and Port

CCreate a new Source NAT Policy rule that matches the existing traffic and enable the Bi-directional option

DCreate a new Destination NAT Policy rule that matches the existing traffic and enable the Bi-directional option

Show Answer

Question: 5

An Administrator is configuring an IPSec VPN toa Cisco ASA at the administrator's home and experiencing issues completing the connection. The following is th output from the command:

less mp-log ikemgr.log:

q5_PCNSE

What could be the cause of this problem?

AThe public IP addresse do not match for both the Palo Alto Networks Firewall and the ASA.

BThe Proxy IDs on the Palo Alto Networks Firewall do not match the settings on the ASA.

CThe shared secerts do not match between the Palo Alto firewall and the ASA

DThe deed peer detection settings do not match between the Palo Alto Networks Firewall and the ASA

Show Answer

Palo Alto Networks PCNSE Quiz:64 Topic:12 Questions:316-320