QUESTION: 1

A session in the Traffic log is reporting the application as "incomplete” What does "incomplete" mean?

The three-way TCP handshake did not complete.
Data was received but wan instantly discarded because of a Deny policy was applied before App ID could be applied.
The three-way TCP handshake was observed, but the application could not be identified.
The traffic is coming across UDP, and the application could not be identified.

Answer(s): A

QUESTION: 2

Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT. Which Security policy rule will allow traffic to flow to the web server?

Untrust (any) to Untrust (10. 1.1. 100), web browsing – Allow
Untrust (any) to Untrust (1. 1. 1. 100), web browsing – Allow
Untrust (any) to DMZ (1. 1. 1. 100), web browsing – Allow
Untrust (any) to DMZ (10. 1. 1. 100), web browsing – Allow

Answer(s): B

Reveal Solution Next Question

QUESTION: 3

Which version of Global Protect supports split tunneling based on destination domain, client process, and HTTP/HTTPs video streaming application?

Glovbalprotect version 4.0 with PAn-OS 8.0
Glovbalprotect version 4.1 with PAn-OS 8.1
Glovbalprotect version 4.0 with PAn-OS 8.1
Glovbalprotect version 4.1 with PAn-OS 8.0

Answer(s): C

Reveal Solution Next Question

A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-number or bacon out to eternal command-and-control (C2) servers.
Which Security Profile type will prevent these behaviors?

Vulnerability Protection
Antivirus
Wildfire
Anti-Spyware

Answer(s): D

Reveal Solution Next Question

Free PCNSC Exam Braindumps (page: 2)

Pass your Palo Alto Networks Certified Network Security Consultant exam with these free Actual Questions and Answers

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

PCNSC Discussions & Posts