Brilliant PCNSC Exam Dumps Get PCNSC Dumps PDF
PCNSC Dumps PDF - PCNSC Real Exam Questions Answers
Topics of Palo Alto PCNSC Exam
- Cloud Workload Protection Platform
- Compliance
- Security
- Web Application
- Setup and Upgrade
- Prisma Cloud Administration
- Dev SecOps Security (Shift-Left) (inc. Compute)
NEW QUESTION 21
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)
- A. Antivirus
- B. Application and Threats
- C. Content-ID
- D. User-ID
Answer: A,B
NEW QUESTION 22
A Company needs to preconfigured firewalls to be sent to remote sites with the least amount of preconfiguration. Once deployed, each firewall must establish secure tunnels back to multiple regional data centers to include the future regional data centers.
Which VPN configuration would adapt to changes when deployed to Hie future site?
- A. preconfigured iPsec tunnels
- B. preconfigured PPTP Tunnels
- C. preconfigured GlobalProtcet client
- D. preconfigured GlobalProtcet satellite
Answer: D
NEW QUESTION 23
An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)
- A. file blocking
- B. NAT
- C. NTP
- D. WildFire updates
- E. antivirus
Answer: B,C,D
NEW QUESTION 24
Which two methods can be used to verify firewall connectivity to Autofocus? (Choose two. )
- A. Check for WildFire forwarding logs.
- B. Verify AutoFocus is enabled below Device Management tab
- C. Verify AutoFocus status using the CLI "test"command.
- D. Check the license
- E. Check the WebUl Dashboard Autofocus widget
Answer: D,E
NEW QUESTION 25
An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. How would the administrator establish the chain of trust?
- A. Use custom certificates.
- B. Configure strong password
- C. Set up multiple-factor authentication.
- D. Enable LDAP or RADIUS integration.
Answer: A
NEW QUESTION 26
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?
- A. Use the debug dataplane packet-diag set capture stage management file command
- B. Enable all four stage of traffic capture (TX, RX, DROP, Firewall)
- C. USe the debug dataplane packet-dia set capture stage firewall file command
- D. Use the tcpdump command
Answer: D
NEW QUESTION 27
Refer to the exhibit.
A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?
- A. Untrust (any) to Untrust (10. 1.1. 100), web browsing - Allow
- B. Untrust (any) to DMZ (10. 1. 1. 100), web browsing - Allow
- C. Untrust (any) to Untrust (1. 1. 1. 100), web browsing - Allow
- D. Untrust (any) to DMZ (1. 1. 1. 100), web browsing - Allow
Answer: C
NEW QUESTION 28
An administrator deploys PA-500 NGFWs as an active/passive high availability pair . The devices are not participating in dynamic router and preemption is disabled.
What must be verified to upgrade the firewalls to the most recent version of PAN OS software?
- A. Antivirus update package
- B. Wildfire update package
- C. User-ID agent
- D. Applications and Threats update package
Answer: D
NEW QUESTION 29
Which feature prevents the submission of login information into website froms?
- A. file blocking
- B. credential phishing prevention
- C. User-ID
- D. data filtering
Answer: B
NEW QUESTION 30
When is the content inspection performed in the packet flow process?
- A. after the SSL Proxy re-encrypts the packet
- B. after the application has been identified
- C. before session lookup
- D. before the packet forwarding process
Answer: B
NEW QUESTION 31
Which option would an administration choose to define the certificate and protect that Panorama and its managed devices uses for SSL/ITS services?
- A. Set up Security policy rule to allow SSL communication.
- B. Configure on SSL/TLS Profile.
- C. Set Up SSL/TLS under Policies > Service/URL Category > Service.
- D. Configure a Decryption Profile and select SSL/TLS services.
Answer: B
NEW QUESTION 32
An administrator has users accessing network resources through Citrix XenApp 7 .x. Which User-ID mapping solution will map multiple mat who using Citrix to connect to the network and access resources?
- A. Globa1Protect
- B. Client Probing
- C. Syslog Monitoring
- D. Terminal Services agent
Answer: D
NEW QUESTION 33
A web server is hosted in the DMZ and the server re configured to listen for income connections on TCP port
443. A Security policies rules allowing access from the Trust zone to the DMZ zone needs to be configured to allow web-browsing access. The web server host its contents over Traffic from Trust to DMZ is being decrypted with a Forward Proxy rule.
Which combination of service and application, and order of Security policy rules needs to be configured to allow cleaned web-browsing traffic to the server on tcp/443?
- A. Rule#1application: web-biows.no; service service-https action allow
Rule#2 application ssl. Service application-default, action allow - B. Rule #1application web-browsing, service service imp action allow
Rule #2 application ssl. service application -default, action allow - C. Rule#1 application web-brows.no service application-default, action allow Rule #2 application ssl. Service application-default, action allow
- D. Rule# 1 application: ssl; service application-default: action allow
Role # 2 application web browsing, service application default, action allow
Answer: C
NEW QUESTION 34
Which three file types can be forward to WildMFire for analysis a part of the basic WildMFire service?
- A. .exe
- B. .pdf
- C. .fon
- D. .dil
- E. .jar
- F. .apk
Answer: B,E,F
NEW QUESTION 35
Which two options prevents the firewall from capturing traffic passing through it? (Choose two.)
- A. The firewall is in milti-vsys mode.
- B. The traffic does not match the packet capture filter
- C. The traffic is offloaded.
- D. The firewall's DP CPU is higher than 50%
Answer: B,C
NEW QUESTION 36
Which three authentication faction factors does PAN-OS software support for MFA? (Choose three.)
- A. SMS
- B. Push
- C. Voice
- D. Okta Adaptive
- E. Pull
Answer: B,C,E
NEW QUESTION 37
VPN traffic intended for an administrator's Palo Alto Networks NGfW is being maliciously intercepted and retransmitted by the interceptor. When Creating a VPN tunnel, which protection profile cm be enabled to prevent this malicious behavior?
- A. Web Application
- B. Replay
- C. zone Protection
- D. DoS Protection
Answer: C
NEW QUESTION 38
An administrator has created an SSL Decryption policy rule that decrypts SSL sessions on any port. Which log entry can the administrator use to verify that sessions are being decrypted?
- A. Decryption tag
- B. Data filtering log
- C. In the details of the Traffic log entries
- D. In the details of the Threat log entries
Answer: C
NEW QUESTION 39
If an administrator wants to decrypt SMTP traffic and possesses the saver's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?
- A. SSH Forward now proxy
- B. TLS Bidirectional Inspection
- C. SSL Inbound Inspection
- D. SMTP inbound Decryption
Answer: A
NEW QUESTION 40
A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation.
Which two formats are correct for naming aggregate interlaces? (Choose two.)
- A. ae.1
- B. ae.8
- C. aggregate.1
- D. aggregate.8
Answer: A,B
NEW QUESTION 41
In High Availability, which information is transferred via the HA data link?
- A. session information
- B. HA state information
- C. User-ID information
- D. heartbeats
Answer: A
NEW QUESTION 42
Which Captive Portal mode must be contoured to support MFA authentication?
- A. NTLM
- B. Single Sign-On
- C. Transparent
- D. Redirect
Answer: D
NEW QUESTION 43
An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?
- A. both the active and passive firewalls independently, with no synchronization afterward
- B. the passive firewall, which then synchronizes to the active firewall
- C. the active firewall, which then synchronizes to the passive firewall
- D. both the active and passive firewalls, which then synchronizes with each other
Answer: D
NEW QUESTION 44
......
Valid PCNSC Test Answers & Palo Alto Networks PCNSC Exam PDF: https://www.exam4docs.com/PCNSC-study-questions.html
Realistic PCNSC Exam Dumps with Accurate & Updated Questions: https://drive.google.com/open?id=1laqLnk5jNl--LwsrDhH6zqcg3uSneQ_p
