PCNSE — Free Practice Questions
10 free sample questions from a bank of 896, with the correct answers and explanations. No signup required — start practising right now.
1Which CLI command is used to simulate traffic going through the firewall and determine which Security policy rule, NAT translation, static route, or PBF rule will be triggered by the traffic?
- check
- find
- test
- sim
Answer: C
2If a template stack is assigned to a device and the stack includes three templates with overlapping settings, which settings are published to the device when the template stack is pushed?
- The settings assigned to the template that is on top of the stack.
- The administrator will be promoted to choose the settings for that chosen firewall.
- All the settings configured in all templates.
- Depending on the firewall location, Panorama decides with settings to send.
Answer: A
3View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?
- It configures the tunnel address of all internal clients to an IP address range starting at 192.168.10.1.
- It forces an internal client to connect to an internal gateway at IP address 192.168.10.1.
- It enables a client to perform a reverse DNS lookup on 192.168.10.1 to detect that it is an internal client.
- It forces the firewall to perform a dynamic DNS update, which adds the internal gateway's hostname and IP address to the DNS server.
Answer: C
4Which three user authentication services can be modified to provide the Palo Alto Networks NGFW with both usernames and role names? (Choose three.)
- TACACS+
- Kerberos
- PAP
- LDAP
- SAML
- RADIUS
Answer:
5What is exchanged through the HA2 link?
- hello heartbeats
- User-ID information
- session synchronization
- HA state information
Answer: C
6Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?
- Both SSH keys and SSL certificates must be generated.
- No prerequisites are required.
- SSH keys must be manually generated.
- SSL certificates must be generated.
Answer: B
7A customer wants to combine multiple Ethernet interfaces into a single virtual interface using link aggregation.
Which two formats are correct for naming aggregate interfaces? (Choose two.)
- ae.8
- aggregate.1
- ae.1
- aggregate.8
Answer:
8Which three authentication factors does PAN-OSֲ® software support for MFA? (Choose three.)
- Push
- Pull
- Okta Adaptive
- Voice
- SMS
Answer:
9VPN traffic intended for an administrator's firewall is being maliciously intercepted and retransmitted by the interceptor.
When creating a VPN tunnel, which protection profile can be enabled to prevent this malicious behavior?
- Zone Protection
- Replay
- Web Application
- DoS Protection
Answer: B
10Which Zone Pair and Rule Type will allow a successful connection for a user on the Internet zone to a web server hosted on the DMZ zone? The web server is reachable using a Destination NAT policy in the Palo Alto Networks firewall.
A. B. C. D.
Answer:
Want the full bank of 896 questions for PCNSE? See all practice exams.