Palo Alto Networks PCNSE Quiz 16 Topic 9 Questions 76-80

Question: 1

An administrator needs to troubleshoot a User-ID deployment The administrator believes that there is an issue related to LDAP authentication The administrator wants to create a packet capture on the management plane

Which CLI command should the administrator use to obtain the packet capture for validating the configuration^

A> ftp export mgmt-pcap from mgmt.pcap to <FTP host>

B> scp export mgmt-pcap from mgmt.pcap to {usernameQhost:path>

C> scp export pcap-mgmt from pcap.mgmt to (username@host:path)

D> scp export pcap from pcap to (usernameQhost:path)

Show Answer

Question: 2

A firewall is configured with SSL Forward Proxy decryption and has the following four enterprise certificate authorities (Cas)

i. Enterprise-Trusted-CA; which is verified as Forward Trust Certificate (The CA is also installed in the trusted store of the end-user browser and system )

ii. Enterprise-Untrusted-CA, which is verified as Forward Untrust Certificate

iii. Enterprise-lntermediate-CA

iv. Enterprise-Root-CA which is verified only as Trusted Root CA

An end-user visits https //www example-website com/ with a server certificate Common Name (CN) www example-website com The firewall does the SSL Forward Proxy decryption for the website and the server certificate is not trusted by the firewall

AEnterprise-Untrusted-CA which is a self-signed CA

BEnterprise-Trusted-CA which is a self-signed CA

CEnterprise-lntermediate-CA which was. in turn, issued by Enterprise-Root-CA

DEnterprise-Root-CA which is a self-signed CA

Show Answer

Question: 3

An administrator plans to deploy 15 firewalls to act as GlobalProtect gateways around the world Panorama will manage the firewalls.

The firewalls will provide access to mobile users and act as edge locations to on-premises infrastructure The administrator wants to scale the configuration out quickly and wants all of the firewalls to use the same template configuration

Which two solutions can the administrator use to scale this configuration? (Choose two.)

Avariables

Btemplate stacks

Ccollector groups

Dvirtual systems

Show Answer

Question: 4

Which three statements accurately describe Decryption Mirror? (Choose three.)

ADecryption Mirror requires a tap interface on the firewall

BDecryption, storage, inspection and use of SSL traffic are regulated in certain countries

COnly management consent is required to use the Decryption Mirror feature

DYou should consult with your corporate counsel before activating and using Decryption Mirror in a production environment

EUse of Decryption Mirror might enable malicious users with administrative access to the firewall to harvest sensitive information that is submitted via an encrypted channel

Show Answer

Question: 5

When you configure a Layer 3 interface what is one mandatory step?

AConfigure Security profiles, which need to be attached to each Layer 3 interface

BConfigure Interface Management profiles which need to be attached to each Layer 3 interface

CConfigure virtual routers to route the traffic for each Layer 3 interface

DConfigure service routes to route the traffic for each Layer 3 interface

Show Answer

Palo Alto Networks PCNSE Quiz:16 Topic:9 Questions:76-80