[Mar-2023 Newly Released] Pass PCNSC Exam - Real Questions and Answers
Pass PCNSC Review Guide, Reliable PCNSC Test Engine
NEW QUESTION 32
If an administrator wants to decrypt SMTP traffic and possesses the saver's certificate, which SSL decryption mode will allow the Palo Alto Networks NGFW to inspect traffic to the server?
- A. TLS Bidirectional Inspection
- B. SSL Inbound Inspection
- C. SSH Forward now proxy
- D. SMTP inbound Decryption
Answer: C
NEW QUESTION 33
A customer wants to combine multiple Ethernet interfaces into a single virtual interface using Link aggregation.
Which two formats are correct for naming aggregate interlaces? (Choose two.)
- A. aggregate.8
- B. ae.1
- C. ae.8
- D. aggregate.1
Answer: B,C
NEW QUESTION 34
Which Captive Portal mode must be contoured to support MFA authentication?
- A. NTLM
- B. Single Sign-On
- C. Redirect
- D. Transparent
Answer: C
NEW QUESTION 35
The firewall identified a popular application as a unknown-tcp. Which options are available to identify the application? (Choose two.)
- A. Create a customer object for the customer application server to identify the custom application.
- B. Create a custom application.
- C. Submit an App-ID request to Palo Alto Networks.
- D. Create a Security policy to identify the customer application.
Answer: A,B
NEW QUESTION 36
An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between panorama and the managed firewall and Log Collectors. How would the administrator establish the chain of trust?
- A. Enable LDAP or RADIUS integration.
- B. Configure strong password
- C. Set up multiple-factor authentication.
- D. Use custom certificates.
Answer: D
NEW QUESTION 37
A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-number or bacon out to eternal command-and-control (C2) servers.
Which Security Profile type will prevent these behaviors?
- A. Vulnerability Protection
- B. Antivirus
- C. Wildfire
- D. Anti-Spyware
Answer: D
NEW QUESTION 38
Which two action would be part of an automatic solution that would block sites with untrusted certificates without enabling SSL forward proxy? (Choose two.)
- A. Create a Security Policy rule with vulnerability Security Profile attached.
- B. Configure an EDL to pull IP Addresses of known sites resolved from a CRL.
- C. Configure a Dynamic Address Group for untrusted sites.
- D. Create a no-decrypt Decryption Policy rule.
- E. Enable the "Block seasons with untrusted Issuers- setting.
Answer: A,E
NEW QUESTION 39
Which two options prevents the firewall from capturing traffic passing through it? (Choose two.)
- A. The traffic is offloaded.
- B. The firewall's DP CPU is higher than 50%
- C. The firewall is in milti-vsys mode.
- D. The traffic does not match the packet capture filter
Answer: A,D
NEW QUESTION 40
How would an administrator monitor/capture traffic on the management interface of the Palo Alto Networks NGFW?
- A. Use the debug dataplane packet-diag set capture stage management file command
- B. Use the tcpdump command
- C. Enable all four stage of traffic capture (TX, RX, DROP, Firewall)
- D. USe the debug dataplane packet-dia set capture stage firewall file command
Answer: B
NEW QUESTION 41
Which virtual router feature determines if a specific destination IP address is reachable'?
- A. Heartbeat Monitoring
- B. Path Monitoring
- C. Ping-Path
- D. Failover
Answer: B
NEW QUESTION 42
During the packet flow process, which two processes are performed in application identification? (Choose two.)
- A. pattern based application identification
- B. application override policy match
- C. session application identified
- D. Application changed from content inspection
Answer: B,C
NEW QUESTION 43
An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?
- A. firewall connectivity to a CRL
- B. Root certificate imported into the firewall with "Trust" enabled
- C. Security policy rule allowing SSL to the target server
- D. importation of a certificate from an HSM
Answer: C
NEW QUESTION 44
A session in the Traffic log is reporting the application as "incomplete" What does "incomplete" mean?
- A. The three-way TCP handshake did not complete.
- B. The traffic is coming across UDP, and the application could not be identified.
- C. Data was received but wan instantly discarded because of a Deny policy was applied before App ID could be applied.
- D. The three-way TCP handshake was observed, but the application could not be identified.
Answer: A
NEW QUESTION 45
An administrator has users accessing network resources through Citrix XenApp 7 .x. Which User-ID mapping solution will map multiple mat who using Citrix to connect to the network and access resources?
- A. Client Probing
- B. Syslog Monitoring
- C. Terminal Services agent
- D. Globa1Protect
Answer: C
NEW QUESTION 46
Which three authentication faction factors does PAN-OS software support for MFA? (Choose three.)
- A. Push
- B. Voice
- C. SMS
- D. Pull
- E. Okta Adaptive
Answer: A,B,D
NEW QUESTION 47
A Palo Alto Networks NGFW just submitted a file lo WildFire tor analysis Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.
How quickly will the firewall receive back a verdict?
- A. 10 to 15 minutes
- B. 5 to 10 minutes
- C. More than 15 minutes
- D. 5 minutes
Answer: B
NEW QUESTION 48
View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?
- A. It forces the firewall to perform a dynamic DNS update, Which adds the internal gateway's hostname and IP address to the DNS server.
- B. It configures the tunnel address of all internal clients lo an IP address range starting at 192 168 10 1.
- C. It enables a Client to perform a reverse DNS lookup on 192 .168. 10 .1. to delect it is an internal client.
- D. It forces an internal client to connect to an internal gateway at IP address 192 168 10 I.
Answer: C
NEW QUESTION 49
An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS software, the administrator enables logs forwarding from the firewalls to panorama Pre-existing logs from the firewall are not appearing in Panorama.
Which action would enables the firewalls to send their preexisting logs to Panorama?
- A. The- log database will need to be exported from the firewall and manually imported into Panorama.
- B. Use the import option to pull logs panorama.
- C. A CLI command will forward the pre-existing logs to Panorama.
- D. Use the ACC to consolidate pre-existing logs.
Answer: C
NEW QUESTION 50
An administrator has left a firewall to used default port for all management services.
Which three function performed by the dataplane? (Choose three.)
- A. file blocking
- B. WildFire updates
- C. NTP
- D. antivirus
- E. NAT
Answer: B,C,E
NEW QUESTION 51
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.
How would an administrator configure the interface to IGbps?
- A. set deviceconfig interface speed-duplex 1Gbs--full-duplex
- B. set deviceconfig system speed-duplex 10Gbps-full-duplex
- C. set deviceconfig interface speed-duplex 1Gbs--half-duplex
- D. set deviceconfig system speed-duplex 1Gbs--half-duplex.
Answer: D
NEW QUESTION 52
......
How much Palo Alto PCNSC Exam costs
- Examination Name: Palo Alto PCNSC
- Examination Fees: $550 USD
- Types of questions: Performance Based Questions
- No. of Questions: 30 Questions
100% Free PCNSC Daily Practice Exam With 74 Questions: https://certkingdom.preppdf.com/Palo-Alto-Networks/PCNSC-prepaway-exam-dumps.html