PCNSE Exam Dumps - Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 41

What are three prerequisites for credential phishing prevention to function? (Choose three.)

In the URL filtering profile, use the drop-down list to enable user credential detection.

Enable Device-ID in the zone.

Select the action for Site Access for each category.

Add the URL filtering profile to one or more Security policy rules.

Set phishing category to block in the URL Filtering profile.

Full Access

Question # 42

Which three statements accurately describe Decryption Mirror? (Choose three.)

Decryption Mirror requires a tap interface on the firewall

Use of Decryption Mirror might enable malicious users with administrative access to the firewall to harvest sensitive information that is submitted via an encrypted channel

Only management consent is required to use the Decryption Mirror feature.

Decryption, storage, inspection, and use of SSL traffic are regulated in certain countries.

You should consult with your corporate counsel before activating and using Decryption Mirror in a production environment.

Full Access

Question # 43

Exhibit.

Given the screenshot, how did the firewall handle the traffic?

Traffic was allowed by profile but denied by policy as a threat.

Traffic was allowed by policy but denied by profile as a threat.

Traffic was allowed by policy but denied by profile as encrypted.

Traffic was allowed by policy but denied by profile as a nonstandard port.

Full Access

Question # 44

Which statement regarding HA timer settings is true?

Use the Recommended profile for typical failover timer settings

Use the Moderate profile for typical failover timer settings

Use the Aggressive profile for slower failover timer settings.

Use the Critical profile for faster failover timer settings.

Full Access

Question # 45

Given the following snippet of a WildFire submission log, did the end user successfully download a file?

No, because the URL generated an alert.

Yes, because both the web-browsing application and the flash file have the 'alert" action.

Yes, because the final action is set to "allow.''

No, because the action for the wildfire-virus is "reset-both."

Full Access

Question # 46

A company requires that a specific set of ciphers be used when remotely managing their Palo Alto Networks appliances. Which profile should be configured in order to achieve this?

SSL/TLS Service Profile

SSH Service Profile

Certificate Profile

Decryption Profile

Full Access

Question # 47

A company has recently migrated their branch office's PA-220S to a centralized Panorama. This Panorama manages a number of PA-7000 Series and PA-5200 Series devices All device group and template configuration is managed solely within Panorama

They notice that commit times have drastically increased for the PA-220S after the migration

What can they do to reduce commit times?

Disable "Share Unused Address and Service Objects with Devices" in Panorama Settings.

Update the apps and threat version using device-deployment

Perform a device group push using the "merge with device candidate config" option

Use "export or push device config bundle" to ensure that the firewall is integrated with the Panorama config.

Full Access

Question # 48

A firewall administrator manages sets of firewalls which have two unique idle timeout values. Datacenter firewalls needs to be set to 20 minutes and BranchOffice firewalls need to be set to 30 minutes. How can the administrator assign these settings through the use of template stacks?

Create one template stack and place the BranchOffice_Template in higher priority than Datacenter_Template.

Create one template stack and place the Datanceter_Template in higher priority than BranchOffice_template.

Create two separate template stacks one each for Datacenter and BranchOffice, and verify that Datacenter_Template and BranchOffice_template are at the bottom of their stack.

Create two separate template stacks one each for Datacenter and BranchOffice, and verify that Datacenter_template are at the top of their stack

Full Access

Go to page: