Palo Alto Networks PCNSE Quiz 4 Topic 2 Questions 16-20

Question: 1

in an HA failover scenario what occurs when sessions match an SSL Forward Proxy Decryption policy?

AHA Sync does not occur the existing session is transferred to the active firewall.

BHA Sync does not occur the firewall drops the session.

CHA Sync occurs the session is sent to testpath

DHA Sync occurs the firewall allows the session Put does not decrypt the session.

Show Answer

Question: 2

Based on the graphic, which statement accurately describes the output shown in the Server Monitoring panel?

q2_PCNSE

AThe User-ID agent is connected to a domain controller labeled lab-client.

BThe host lab-client has been found by the User-ID agent.

CThe host lab-client has been found by a domain controller.

DThe User-ID agent is connected to the firewall labeled lab-client.

Show Answer

Question: 3

A superuser is tasked with creating administrator accounts for three contractors For compliance purposes, all three contractors will be working with different device-groups in their hierarchy to deploy policies and objects.

Which type of role-based access is most appropriate for this project?

ACreate a Dynamic Admin with the Panorama Administrator role

BCreate a Custom Panorama Admin

CCreate a Device Group and Template Admin

DCreate a Dynamic Read only superuser

Show Answer

Question: 4

When deploying PAN-OS SD-WAN, which routing protocol can you use to build a routing overlay?

AOSPFv3

BBGP

COSPF

DRIP

Show Answer

Question: 5

The manager of the network security team has asked you to help configure the company's Security Profiles according to Palo Alto Networks best practice As part of that effort, the manager has assigned you the Vulnerability Protection profile for the internet gateway firewall

Which action and packet-capture setting for items of high severity and critical severity best matches Palo Alto Networks best practice'?

Aaction 'reset-both' and packet capture 'extended-capture'

Baction 'default' and packet capture 'single-packet'

Caction 'reset-both' and packet capture 'single-packet'

Daction 'reset-server' and packet capture 'disable'

Show Answer

Palo Alto Networks PCNSE Quiz:4 Topic:2 Questions:16-20