PCNSE exam

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks. How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?A . Define a...

Which version of GlobalProtect supports split tunneling based on destination domain, client process, and HTTP/HTTPS video streaming application?A . GlobalProtect version 4.0 with PAN-OS 8.1B . GlobalProtect version 4.1 with PAN-OS 8.1C . GlobalProtect version 4.1 with PAN-OS 8.0D . GlobalProtect version 4.0 with PAN-OS 8.0View AnswerAnswer: B

Refer to the exhibit. Which certificates can be used as a Forwarded Trust certificate?A . Certificate from Default Trust Certificate AuthoritiesB . Domain Sub-CAC . Forward_TrustD . Domain-Root-CertView AnswerAnswer: B

What is the purpose of the firewall decryption broker?A . Decrypt SSL traffic a then send it as cleartext to a security chain of inspection toolsB . Force decryption of previously unknown cipher suitesC . Inspection traffic within IPsec tunnelD . Reduce SSL traffic to a weaker cipher before sending...

Which three authentication factors does PAN-OS® software support for MFA (Choose three.)A . PushB . PullC . Okta AdaptiveD . VoiceE . SMSView AnswerAnswer: A,D,E Explanation: Reference: https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure-multi-factor-authentication

How can a candidate or running configuration be copied to a host external from Panorama?A . Commit a running configuration.B . Save a configuration snapshot.C . Save a candidate configuration.D . Export a named configuration snapshot.View AnswerAnswer: D Explanation: Reference: https://www.paloaltonetworks.com/documentation/71/panorama/panorama_adminguide/administer-panorama/back-up- panorama-and-firewall-configurations

Where can an administrator see both the management plane and data plane CPU utilization in the WebUI?A . System logB . CPU Utilization widgetC . Resources widgetD . System Utilization logView AnswerAnswer: C Explanation: System Resources (widget)Displays the Management CPU usage, Data Plane usage, and the Session Count (the number...

Which three file types can be forwarded to WildFire for analysis as a part of the basic WildFire service? (Choose three.)A . .dllB . .exeC . .srcD . .apkE . .pdfF . .jarView AnswerAnswer: D,E,F Explanation: https://docs.paloaltonetworks.com/pan-os/7-1/pan-os-admin/getting-started/enable-basic-wildfire-forwarding

An administrator needs to upgrade an NGFW to the most current version of PAN-OS® software. The following is occurring: • Firewall has Internet connectivity through e1/1. • Default security rules and security rules allowing all SSL and web-browsing traffic to and from any zone. • Service route is configured, sourcing...

Starling with PAN-OS version 9.1, GlobalProtect logging information is now recorded in which firewall log?A . ConfigurationB . GlobalProtectC . AuthenticationD . SystemView AnswerAnswer: B