Updated Oct-2021 Test Engine or PDF for the Palo Alto Networks PCNSC test to help you quickly prepare for the Palo Alto Networks exam!
Full PCNSC Practice Test and 74 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 20
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.
How would an administrator configure the interface to IGbps?
- A. set deviceconfig interface speed-duplex 1Gbs--full-duplex
- B. set deviceconfig interface speed-duplex 1Gbs--half-duplex
- C. set deviceconfig system speed-duplex 10Gbps-full-duplex
- D. set deviceconfig system speed-duplex 1Gbs--half-duplex.
Answer: D
NEW QUESTION 21
A Palo Alto Networks NGFW just submitted a file lo WildFire tor analysis Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.
How quickly will the firewall receive back a verdict?
- A. 5 to 10 minutes
- B. 10 to 15 minutes
- C. 5 minutes
- D. More than 15 minutes
Answer: A
NEW QUESTION 22
What are two benefits of nested device groups in panorama? (Choose two )
- A. reuse of the existing Security policy rules and objects
- B. requires configuration both function and location for every device
- C. overwrites local firewall configuration
- D. all device groups inherit setting from the Shared group
Answer: B,D
NEW QUESTION 23
An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables logs forwarding from the firewalls to panorama Pre-existing logs from the firewall are not appearing in Panorama.
Which action would enables the firewalls to send their preexisting logs to Panorama?
- A. A CLI command will forward the pre-existing logs to Panorama.
- B. Use the import option to pull logs panorama.
- C. The- log database will need to be exported from the firewall and manually imported into Panorama.
- D. Use the ACC to consolidate pre-existing logs.
Answer: A
NEW QUESTION 24
Which two benefits come from assigning a Decrypting Profile to a Decryption rule with a" NO Decrypt" action? (Choose two.)
- A. Block sessions with expired certificates
- B. Block sessions with untrusted issuers
- C. Block sessions with client authentication
- D. Block sessions with unsuspected cipher suites
- E. Block credential phishing.
Answer: A,B
NEW QUESTION 25
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)
- A. Content-ID
- B. User-ID
- C. Application and Threats
- D. Antivirus
Answer: C,D
NEW QUESTION 26
An administrator has enabled OSPF on a virtual router on the NGFW OSPF is not adding new routes to the virtual router.
Which two options enable the administrator top troubleshoot this issue? (Choose two.)
- A. View Runtime Status virtual router.
- B. View System logs.
- C. Add a redistribution profile to forward as BGP updates.
- D. Perform a traffic pcap at the routing stage.
Answer: A,B
NEW QUESTION 27
Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)
- A. TACACS+
- B. LDAP
- C. Kerberos
- D. RADIUS
- E. SAML
- F. PAP
Answer: A,B,D
NEW QUESTION 28
A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny".
Which action will this configuration cause on the matched traffic?
- A. The configuration is valid It will cause the firewall to deny the matched sessions. Any configured Security Profiles have no effect if the Security policy rule action is set to "Deny" The configuration will allow the matched session unless a vulnerability signature is detected. The "Deny" action will supersede the per. defined, severity defined actions defined in the associated Vulnerability Protection Profile.
- B. The configuration is invalid. The Profile Settings section will be- grayed out when the action is set to "Deny"
- C. The configuration is invalid it will cause the firewall to Skip this Security policy rule A warning will be displayed during a command.
Answer: B
NEW QUESTION 29
An organization has Palo Alto Networks MGfWs that send logs to remote monitoring and security management platforms. The network team has report has excessive traffic on the corporate WAN. How could the Palo Alto Networks NOFW administrator reduce WAN traffic while maintaining support for all the existing monitoring/security platforms?
- A. Any configuration on an M-500 would address the insufficient bandwidth concerns.
- B. Configure log compression and optimization features on all remote firewalls.
- C. forward logs from firewalls only to Panorama, and have Panorama forward log* lo other external service.
- D. Forward logs from external sources to Panorama for correlation, arid from Panorama send to the NGFW
Answer: C
NEW QUESTION 30
What will be the egress interface if the traffic's ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.
- A. ethernet 1/5
- B. ethernet 1/3
- C. ethernet 1/7
- D. ethernet 1/6
Answer: B
NEW QUESTION 31
If the firewall is configured for credential phishing prevention using the "Domain Credential Filter" method, which login will be detected as credential theft?
- A. Matching any valid corporate username.
- B. Mapping to the IP address of the logged-in user.
- C. Using the name user's corporate username and password.
- D. First four letters of the username matching any valid corporate username.
Answer: B
NEW QUESTION 32
Which three options are supposed in HA Lite? (Choose three.)
- A. Configuration synchronization
- B. session synchronization
- C. synchronization of IPsec security associations
- D. Virtual link
- E. active/passive deployment
Answer: A,C,E
NEW QUESTION 33
Which method will dynamically register tags on the Palo Alto Networks NGFW?
- A. Restful API or the VMware API on the firewall or on the User.-D agent or the ready -only domain controller
- B. XML- API or lite VM Monitoring agent on the NGFW or on the User- ID agent
- C. Restful API or the VMware API on the firewall or on the User-ID Agent
- D. XML API or the VMware API on the firewall on the User-ID agent or the CLI
Answer: B
NEW QUESTION 34
Which feature prevents the submission of corporate login information into website forms?
- A. file blocking
- B. User-ID
- C. data filtering
- D. credential submission prevention
Answer: D
NEW QUESTION 35
Which event will happen administrator uses an Application Override Policy?
- A. The Palo Alto Networks NGFW Steps App-ID processing at Layer 4.
- B. App-ID processing time is increased.
- C. The application name assigned to the traffic by the security rule is written to the traffic log.
- D. Threat-ID processing time is decreased.
Answer: A
NEW QUESTION 36
Which PAN-OS policy must you configure to force a user to provide additional credential before he is allowed to access an internal application that contains highly sensitive business data?
- A. Decryption policy
- B. Authentication policy
- C. Application Override policy
- D. Security policy
Answer: B
NEW QUESTION 37
......
Full PCNSC Practice Test and 74 unique questions with explanations waiting just for you, get it now: https://www.dumpsactual.com/PCNSC-actualtests-dumps.html
