Palo Alto Networks PCNSE Quiz 74 Topic 13 Questions 366-370

Question: 1

A network security engineer has applied a File Blocking profile to a rule with the action of Block. The user of a Linux CLI operating system has opened a ticket. The ticket states that the user is being blocked by the firewall when trying to download a TAR file. The user is getting no error response on the system.

Where is the best place to validate if the firewall is blocking the user's TAR file?

AURL Filtering log

BData Filtering log

CThreat log

DWildFire Submissions log

Show Answer

Question: 2

An engineer is deploying multiple firewalls with common configuration in Panorama.

What are two benefits of using nested device groups? (Choose two.)

AInherit settings from the Shared group

BInherit IPSec crypto profiles

CInherit all Security policy rules and objects

DInherit parent Security policy rules and objects

Show Answer

Question: 3

An engineer troubleshooting a VPN issue needs to manually initiate a VPN tunnel from the CLI.

Which CLI command can the engineer use?

Atest vpn flow

Btest vpn Ike---sa

Ctest vpn tunnel

Dtest vpn gateway

Show Answer

Question: 4

View the screenshots. A QoS profile and policy rules are configured as shown. Based on this information, which two statements are correct? (Choose two.)

ADNS has a higher priority and more bandwidth than SSH.

BGoogle-video has a higher priority and more bandwidth than WebEx.

CSMTP has a higher priority but lower bandwidth than Zoom.

DFacetime has a higher priority but lower bandwidth than Zoom.

Show Answer

Question: 5

Which protection feature is available only in a Zone Protection Profile?

ASYN Flood Protection using SYN Flood Cookies

BICMP Flood Protection

CPort Scan Protection

DUDP Flood Protections

Show Answer

Palo Alto Networks PCNSE Quiz:74 Topic:13 Questions:366-370