Free PCNSC Exam Braindumps
Palo Alto Networks Certified Network Security Consultant Questions 11–15 (page: 4)

Updated On: 10-Feb-2026

An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.
Which NGFW receives the configuration from panorama?

  1. the active firewall, which then synchronizes to the passive firewall
  2. the passive firewall, which then synchronizes to the active firewall
  3. both the active and passive firewalls independently, with no synchronization afterward
  4. both the active and passive firewalls, which then synchronizes with each other

Answer(s): D



What is exchanged through the HA2 link?

  1. hello heartbeats
  2. User-ID in information
  3. session synchronization
  4. HA state information

Answer(s): C



A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny". Which action will this configuration cause on the matched traffic?

  1. The configuration is invalid it will cause the firewall to Skip this Security policy rule A warning will be displayed during a command.
  2. The configuration is valid It will cause the firewall to deny the matched sessions. Any configured Security Profiles have no effect if the Security policy rule action is set to "Deny"
  3. The configuration will allow the matched session unless a vulnerability signature is detected. The "Deny" action will supersede the per. defined, severity defined actions defined in the associated Vulnerability Protection Profile.
  4. The configuration is invalid. The Profile Settings section will be- grayed out when the action is set to "Deny"

Answer(s): C



Which DoS protection mechanism detects and prevents session exhaustion attacks?

  1. TCP Port Scan Protection
  2. Flood Protection
  3. Resource Protection
  4. Pocket Based Attack Protection

Answer(s): C



Refer to the exhibit.


An administrator wants multiple web servers in the DMZ to receive connections from the internet. Traffic destined for 206.15.22.9 port 80/TCP needs to be forwarded to the server at 10 1.22
Based on the information shown in the age, which NAT rule will forward web-browsing traffic correctly?





Answer(s): A



Viewing page 4 of 16
Viewing questions 16 - 20 out of 75 questions


Post your Comments and Discuss Palo Alto Networks PCNSC exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!