PCNSE Exam Dumps - Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0

Go to page:

<< First
Prev
2
3
4
5
6
7
8
9
10
11
Next
Last >>

Question # 81

An administrator is using Panorama to manage multiple firewalls. After upgrading all devices to the latest PAN-OS software, the administrator enables log forwarding from the firewalls to Panorama.

However, pre-existing logs from the firewalls are not appearing in Panorama.

Which action should be taken to enable the firewalls to send their pre-existing logs to Panorama?

Export the log database.

Use the import option to pull logs.

Use the scp logdb export command.

Use the ACC to consolidate the logs.

Full Access

Question # 82

An administrator notices interface ethernet1/2 failed on the active firewall in an active / passive firewall high availability (HA) pair Based on the image below what - if any - action was taken by the active firewall when the link failed?

The active firewall failed over to the passive HA member because "any" is selected for the Link Monitoring

No action was taken because Path Monitoring is disabled

No action was taken because interface ethernet1/1 did not fail

The active firewall failed over to the passive HA member due to an AE1 Link Group failure

Full Access

Question # 83

A security engineer is informed that the vulnerability protection profile of their on-premises Palo Alto Networks firewall is triggering on a common Threat ID, and which has been determined to be a false positive. The engineer is asked to resolve the issue as soon as possible because it is causing an outage for a critical service The engineer opens the vulnerability protection profile to add the exception, but the Threat ID is missing.

Which action is the most operationally efficient for the security engineer to find and implement the exception?

Review high severity system logs to identify why the threat is missing in Vulnerability Profile Exceptions.

Open a support case.

Review traffic logs to add the exception from there.

Select 'Show all signatures' within the Vulnerability Protection Profile under 'Exceptions'.

Full Access

Question # 84

An engineer is configuring a template in Panorama which will contain settings that need to be applied to all firewalls in production.

Which three parts of a template an engineer can configure? (Choose three.)

NTP Server Address

Antivirus Profile

Authentication Profile

Service Route Configuration

Dynamic Address Groups

Full Access

Question # 85

Which new PAN-OS 11.0 feature supports IPv6 traffic?

DHCPv6 Client with Prefix Delegation

OSPF

DHCP Server

IKEv1

Full Access

Question # 86

A firewall administrator has been tasked with ensuring that all Panorama configuration is committed and pushed to the devices at the end of the day at a certain time. How can they achieve this?

Use the Scheduled Config Push to schedule Commit to Panorama and also Push to Devices.

Use the Scheduled Config Push to schedule Push to Devices and separately schedule an API call to commit all Panorama changes.

Use the Scheduled Config Export to schedule Push to Devices and separately schedule an API call to commit all Panorama changes

Use the Scheduled Config Export to schedule Commit to Panorama and also Push to Devices

Full Access

Question # 87

A customer wants to deploy User-ID on a Palo Alto Network NGFW with multiple vsys. One of the vsys will support a GlobalProtect portal and gateway. the customer uses Windows

Deploy the GlobalProtect as a lee data hub.

Deploy Window User 0 agents on each domain controller.

Deploys AILS integrated Use 10 agent on each vsys.

Deploy a M.200 as a Users-ID collector.

Full Access

Question # 88

An engineer is pushing configuration from Panorama to a managed firewall What happens when the pushed Panorama configuration has Address Object names that duplicate the Address Objects already configured on the firewall?

The firewall ignores only the pushed objects that have the same name as the locally configured objects, and it will commit the rest of the pushed configuration.

The firewall fully commits all of the pushed configuration and overwrites its locally configured objects

The firewall rejects the pushed configuration, and the commit fails.

The firewall renames the duplicate local objects with "-1" at the end signifying they are clones; it will update the references to the objects accordingly and fully commit the pushed configuration.

Full Access

Go to page: