Palo Alto Networks PCNSE Palo Alto Networks Certified Network Security Engineer (PAN-OS 10.0) Exam Exam Practice Test Questions

• Question 1

  A firewall administrator has been tasked with ensuring that all Panorama configuration is committed and pushed to the devices at the end of the day at a certain time. How can they achieve this?

  • Use the Scheduled Config Push to schedule Commit to Panorama and also Push to Devices.
  • Use the Scheduled Config Push to schedule Push to Devices and separately schedule an API call to commit all Panorama changes.
  • Use the Scheduled Config Export to schedule Push to Devices and separately schedule an API call to commit all Panorama changes
  • Use the Scheduled Config Export to schedule Commit to Panorama and also Push to Devices

  Show Answer Answer: A Next

• Question 2

  An administrator wants to enable WildFire inline machine learning. Which three file types does WildFire inline ML analyze? (Choose three.)

  • Powershell scripts
  • VBscripts
  • MS Office
  • APK
  • ELF

  Show Answer Answer: A, C, E Next

• Question 3

  An administrator has two pairs of firewalls within the same subnet. Both pairs of firewalls have been configured to use High Availability mode with Active/Passive. The ARP tables for upstream routes display the same MAC address being shared for some of these firewalls.What can be configured on one pair of firewalls to modify the MAC addresses so they are no longer in conflict?

  • Configure a floating IP between the firewall pairs.
  • Change the Group IDs in the High Availability settings to be different from the other firewall pair on the same subnet.
  • Change the interface type on the interfaces that have conflicting MAC addresses from L3 to VLAN.
  • On one pair of firewalls, run the CLI command: set network interface vlan arp.

  Show Answer Answer: B Next

• Question 4

  Which rule type controls end user SSL traffic to external websites?

  • SSL Outbound Proxyless Inspection
  • SSL Forward Proxy
  • SSH Proxy
  • SSL Inbound Inspection

  Show Answer Answer: B Next

• Question 5

  What does SSL decryption require to establish a firewall as a trusted third party and to establish trust between a client and server to secure an SSL/TLS connection'?

  • Certificates
  • Profiles
  • Link state
  • Stateful firewall connection

  Show Answer Answer: A Next