PCNSE exam

DRAG DROP Place the steps in the WildFire process workflow in their correct order. View AnswerAnswer: Explanation: Timeline Description automatically generated https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-overview/about-wildfire.html

A company wants to use their Active Directory groups to simplify their Security policy creation from Panorama. Which configuration is necessary to retrieve groups from Panorama?A . Configure an LDAP Server profile and enable the User-ID service on the management interface.B . Configure a group mapping profile to retrieve the...

An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes that the firewall is not using a static route. What are two reasons why the firewall might not use a static route? (Choose...

Given the following snippet of a WildFire submission log. did the end-user get access to the requested information and why or why not? A . Yes. because the action is set to "allow ''B . No because WildFire categorized a file with the verdict "malicious"C . Yes because the action...

in an HA failover scenario what occurs when sessions match an SSL Forward Proxy Decryption policy?A . HA Sync does not occur the existing session is transferred to the active firewall.B . HA Sync does not occur the firewall drops the session.C . HA Sync occurs the session is sent...

DRAG DROP Below are the steps in the workflow for creating a Best Practice Assessment in a firewall and Panorama configuration Place the steps in order. View AnswerAnswer: Explanation: Step 1. In either the NGFW or in Panorama, on the Operations/Support tab, download the technical support file. Step 2. Log...

An engineer is creating a security policy based on Dynamic User Groups (DUG) What benefit does this provide?A . Automatically include users as members without having to manually create and commit policy or group changesB . DUGs are used to only allow administrators access to the management interface on the...

What are three tasks that cannot be configured from Panorama by using a template stack? (Choose three)A . configure a device block listB . rename a vsys on a multi-vsys firewallC . enable operational modes such as normal mode, multi-vsys mode, or FIPS-CC modeD . add administrator accountsE . change...

DRAG DROP Place the steps to onboard a ZTP firewall into Panorama/CSP/ZTP-Service in the correct order. View AnswerAnswer: Explanation: Graphical user interface, text, application, email Description automatically generated https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/manage-firewalls/set-up-zero-touch-provisioning/ztp-overview/ztp-configuration-elements.html

A network administrator wants to use a certificate for the SSL/TLS Service Profile. Which type of certificate should the administrator use?A . certificate authority (CA) certificateB . client certificateC . machine certificateD . server certificateView AnswerAnswer: D Explanation: Use only signed certificates, not CA certificates, in SSL/TLS service profiles. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/certificate-management/configure-an-ssltls-service-profile.html