Palo Alto Networks PCNSE Quiz 20 Topic 8 Questions 96-100

Question: 1

Which is not a valid reason for receiving a decrypt-cert-validation error?

AUnsupported HSM

BUnknown certificate status

CClient authentication

DUntrusted issuer

Show Answer

Question: 2

In the following image from Panorama, why are some values shown in red?

q2_PCNSE

Asg2 session count is the lowest compared to the other managed devices.

Bus3 has a logging rate that deviates from the administrator-configured thresholds.

Cuk3 has a logging rate that deviates from the seven-day calculated baseline.

Dsg2 has misconfigured session thresholds.

Show Answer

Question: 3

What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

APanorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.

BAn administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 8.1 state.

CWhen Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.

DAdministrators need to manually update variable characters to those used in pre-PAN-OS 8.1.

Show Answer

Question: 4

Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)

ACRL

BCRT

COCSP

DCert-Validation-Profile

ESSL/TLS Service Profile

Show Answer

Question: 5

Which administrative authentication method supports authorization by an external service?

ACertificates

BLDAP

CRADIUS

DSSH keys

Show Answer

Palo Alto Networks PCNSE Quiz:20 Topic:8 Questions:96-100