PCNSE Exam Dumps - Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 25

An engineer is deploying multiple firewalls with common configuration in Panorama.

What are two benefits of using nested device groups? (Choose two.)

Inherit settings from the Shared group

Inherit IPSec crypto profiles

Inherit all Security policy rules and objects

Inherit parent Security policy rules and objects

Full Access

Question # 26

Refer to the exhibit.

Based on the screenshots above what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?

shared pre-rules

DATACENTER DG pre rules

rules configured locally on the firewall

shared post-rules

DATACENTER_DG post-rules

DATACENTER.DG default rules

shared pre-rules

DATACENTER_DG pre-rules

rules configured locally on the firewall

shared post-rules

DATACENTER.DG post-rules

shared default rules

shared pre-rules

DATACENTER_DG pre-rules

rules configured locally on the firewall

DATACENTER_DG post-rules

shared post-rules

shared default rules

shared pre-rules

DATACENTER_DG pre-rules

rules configured locally on the firewall

DATACENTER_DG post-rules

shared post-rules

DATACENTER_DG default rules

Full Access

Question # 27

An administrator needs to assign a specific DNS server to an existing template variable. Where would the administrator go to edit a template variable at the device level?

"Managed Devices > Device Association"

PDF Export under "Panorama > Templates"

Variable CSV export under "Panorama > Templates"

Manage variables under "Panorama > Templates"

Full Access

Question # 28

A firewall administrator manages sets of firewalls which have two unique idle timeout values. Datacenter firewalls needs to be set to 20 minutes and BranchOffice firewalls need to be set to 30 minutes. How can the administrator assign these settings through the use of template stacks?

Create one template stack and place the BranchOffice_Template in higher priority than Datacenter_Template.

Create one template stack and place the Datanceter_Template in higher priority than BranchOffice_template.

Create two separate template stacks one each for Datacenter and BranchOffice, and verify that Datacenter_Template and BranchOffice_template are at the bottom of their stack.

Create two separate template stacks one each for Datacenter and BranchOffice, and verify that Datacenter_template are at the top of their stack

Full Access

Question # 29

A firewall administrator has confirm reports of a website is not displaying as expected, and wants to ensure that decryption is not causing the issue. Which three methods can the administrator use to determine if decryption is causing the website to fail? (Choose three.)

Move the policy with action decrypt to the top of the decryption policy rulebase.

Temporarily disable SSL decryption for all websites to troubleshoot the issue.

Create a policy-based â€œNo Decryptâ€ rule in the decryption policy to exclude specific traffic from decryption.

Investigate decryption logs of the specific traffic to determine reasons for failure.

Disable SSL handshake logging.

Full Access

Question # 30

A firewall administrator has been tasked with ensuring that all firewalls forward System logs to Panorama. In which section is this configured?

Monitor > Logs > System

Objects > Log Forwarding

Panorama > Managed Devices

Device > Log Settings

Full Access

Question # 31

Which three authentication types can be used to authenticate users? (Choose three.)

Local database authentication

PingID

Kerberos single sign-on

GlobalProtect client

Cloud authentication service

Full Access

Question # 32

An engineer configures a specific service route in an environment with multiple virtual systems instead of using the inherited global service route configuration.

What type of service route can be used for this configuration?

IPv6 Source or Destination Address

Destination-Based Service Route

IPv4 Source Interface

Inherit Global Setting

Full Access