PCNSC Exam Dumps - Palo Alto Networks Certified Network Security Consultant

Go to page:

Question # 4

A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.

How would an administrator configure the interface to IGbps?

set deviceconfig system speed-duplex 10Gbps-full-duplex

set deviceconfig interface speed-duplex 1Gbs--full-duplex

set deviceconfig interface speed-duplex 1Gbs--half-duplex

set deviceconfig system speed-duplex 1Gbs--half-duplex.

Full Access

Question # 5

An administrator deploys PA-500 NGFWs as an active/passive high availability pair . Thedevices are not participating in dynamic router and preemption is disabled.

What must be verified to upgrade the firewalls to the most recent version of PAN OSÂ® software?

Antivirus update package

Applications and Threats update package

Wildfire update package

User-ID agent

Full Access

Question # 6

Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSLforward proxy? (Choose two.)

Configure an EDL to pull IP Addresses of known sites resolved from a CRL.

Create a Security Policy rule with vulnerability Security Profile attached.

Create a no-decrypt Decryption Policy rule.

Enable the "Block seasons with untrusted Issuers- setting.

Configure a Dynamic Address Group for untrusted sites.

Full Access

Question # 7

An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22

Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?

Option A

Option B

Option C

Option D

Full Access

Question # 8

Which PAN-OSÂ® policy must you configure to force a user to provide additional credential before he is allowed to access an internal application that contains highly sensitive business data?

Authentication policy

Decryption policy

Security policy

Application Override policy

Full Access

Go to page: