PCNSE Exam Dumps - Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 4

An administrator is troubleshooting intermittent connectivity problems with a user's GlobalProtect connection. Packet captures at the firewall reveal missing UDP packets, suggesting potential packet loss on the connection. The administrator aims to resolve the issue by enforcing an SSL tunnel over TCP specifically for this user.

What configuration change is necessary to implement this troubleshooting solution for the user?

Enable SSL tunnel within the GlobalProtect gateway remote user's settings.

Modify the user's client to prioritize UDP traffic for GlobalProtect.

Enable SSL tunnel over TCP in a new agent configuration for the specific user.

Increase the user's VPN bandwidth allocation in the GlobalProtect settings.

Full Access

Question # 5

An enterprise network security team is deploying VM-Series firewalls in a multi-cloud environment. Some firewalls are deployed in VMware NSX-V, while others are in AWS, and all are centrally managed using Panorama with the appropriate plugins installed. The team wants to streamline policy management by organizing the firewalls into device groups in which the AWS-based firewalls act as a parent device group, while the NSX-V firewalls are configured as a child device group to inherit Security policies. However, after configuring the device group hierarchy and attempting to push configurations, the team receives errors, and policy inheritance is not functioning as expected. What is the most likely cause of this issue?

Panorama must use the same plugin version numbers for both AWS and NSX-V environments before device group inheritance can function properly

Panorama requires the objects to be overridden in the child device group before firewalls in different hypervisors can inherit Security policies

Panorama by default does not allow different hypervisors in parent/child device groups, but this can be overridden with the command "set device-group allow-multi-hypervisor enable"

Panorama does not support policy inheritance across device groups containing firewalls deployed in different hypervisors when using multiple plugins

Full Access

Question # 6

Review the screenshot of the Certificates page.

An administrator for a small LLC has created a series of certificates as shown, to use for a planned Decryption roll out. The administrator has also installed the self-signed root certificate in all client systems.

When testing, they noticed that every time a user visited an SSL site, they received unsecured website warnings.

What is the cause of the unsecured website warnings?

The forward untrust certificate has not been signed by the self-singed root CA certificate.

The forward trust certificate has not been installed in client systems.

The self-signed CA certificate has the same CN as the forward trust and untrust certificates.

The forward trust certificate has not been signed by the self-singed root CA certificate.

Full Access

Question # 7

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?

Enable and configure the Packet Buffer protection thresholds.Enable Packet Buffer Protection per ingress zone.

Enable and then configure Packet Buffer thresholdsEnable Interface Buffer protection.

Create and Apply Zone Protection Profiles in all ingress zones.Enable Packet Buffer Protection per ingress zone.

Configure and apply Zone Protection Profiles for all egress zones.Enable Packet Buffer Protection pre egress zone.

Enable per-vsys Session Threshold alerts and triggers for Packet Buffer Limits.Enable Zone Buffer Protection per zone.

Full Access

Question # 8

A security engineer has configured a GlobalProtect portal agent with four gateways Which GlobalProtect Gateway will users connect to based on the chart provided?

South

West

East

Central

Full Access

Go to page: