Palo Alto Networks PCNSE Quiz 71 Topic 7 Questions 351-355

Question: 1

What are three reasons why an installed session can be identified with the application

AThe TCP connection was terminated without identifying any application data

BThe client sent a TCP segment with the PUSH flag set

CThere is not enough application data after the TCP connection was established

DThe TCP connection did not fully establish

EThere was no application data after the TCP connection was established

Show Answer

Question: 2

Panorama provides which two SD_WAN functions? (Choose two.)

Adata plane

Bphysical network links

Cnetwork monitoring

Dcontrol plane

Show Answer

Question: 3

Which GlobalProtect component must be configured to enable Chentless VPN?

AGlobalProtect satellite

BGlobalProtect app

CGlobalProtect portal

DGlobalProtect gateway

Show Answer

Question: 4

A firewall is configured with SSL Forward Proxy decryption and has the following four enterprise certificate authorities (Cas)

i. Enterprise-Trusted-CA; which is verified as Forward Trust Certificate (The CA is also installed in the trusted store of the end-user browser and system )

ii. Enterpnse-Untrusted-CA, which is verified as Forward Untrust Certificate

iii. Enterprise-lntermediate-CA

iv. Enterprise-Root-CA which is verified only as Trusted Root CA

An end-user visits https //www example-website com/ with a server certificate Common Name (CN) www example-website com The firewall does the SSL Forward Proxy decryption for the website and the server certificate is not trusted by the firewall

AEnterprise-Untrusted-CA which is a self-signed CA

BEnterprise-Trusted-CA which is a self-signed CA

CEnterprise-lntermediate-CA which was. in turn, issued by Enterprise-Root-CA

DEnterprise-Root-CA which is a self-signed CA

Show Answer

Question: 5

Your company has to Active Directory domain controllers spread across multiple WAN links All users authenticate to Active Directory Each link has substantial network bandwidth to support all mission-critical applications. The firewalls management plane is highly utilized

Given this scenario which type of User-ID agent is considered a best practice by Palo Alto Networks?

APAN-OS integrated agent

BCaptive Portal

CCitrix terminal server agent with adequate data-plane resources

DWindows-based User-ID agent on a standalone server

Show Answer

Palo Alto Networks PCNSE Quiz:71 Topic:7 Questions:351-355