[2024] PCNSC.pdf – Questions Answers PDF Sample Questions Reliable [Q10-Q28]

Q10. An existing customer who has deployed several Palo Alto Networks Next-Generation Firewalls would like to start using Device-ID to obtain policy rule recommendations They have also purchased a Support license, a Threat license a URL Filtering license, and a WildFire license for each firewall What additional license do they need to purchase”?

Q11. An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?

Q12. A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-number or bacon out to eternal command-and-control (C2) servers.
Which Security Profile type will prevent these behaviors?

Q13. An administrator needs to create a new Antivirus Profile to address a virus that is spreading internally over SMB.
To create a secure posture the administrator should choose which set of actions for the SMB decoder in an Antivirus Profile?

Q14. In Panorama, what is the correct order of precedence for security policies?

Q15. Which of the following Palo Alto Networks features can help reduce the attack surface by limiting the number of applications allowed through the firewall?

Q16. An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22 Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?

A)

B)

C)

D)

Q17. An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)

Q18. Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

Q19. Which Panorama operational mode is necessary to manage a large number of firewalls and also act as a log collector?

Q20. A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation.
Which two formats are correct for naming aggregate interlaces? (Choose two.)

Q21. An organization has Palo Alto Networks MGfWs that send logs to remote monitoring and security management platforms. The network team has report has excessive traffic on the corporate WAN. How could the Palo Alto Networks NOFW administrator reduce WAN traffic while maintaining support for all the existing monitoring/security platforms?

Q22. Which method will dynamically register tags on the Palo Alto Networks NGFW?

Q23. An administrator has enabled OSPF on a virtual router on the NGFW OSPF is not adding new routes to the virtual router.
Which two options enable the administrator top troubleshoot this issue? (Choose two.)

Q24. A global corporate office has a large-scale network with only one User-ID agent, which creates a bottleneck near the User-ID agent server. Which solution in PAN -OS software would help in this case?

Q25. In Panorama the web interface displays the security rules in evaluation order Organize the security rules m the order in which they will be evaluated?

Q26. Which User-ID method should b configured to map addresses to usernames for users connected through a terminal server?

Q27. Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)

Q28. What configuration is necessary for Active/Active HA to synchronize sessions between peers?