QUESTION: 37

An administrator has left a firewall to use the default port for all management services. Which three functions are performed by the dataplane? (Choose three.)

WildFire updates
NAT
NTP
antivirus
file blocking

Answer(s): B,D,E

Reveal Solution Next Question

An administrator is using Panorama and multiple Palo Alto Networks NGFWs. After upgrading all devices to the latest PAN-OS® software, the administrator enables log forwarding from the firewalls to Panorama. Pre-existing logs from the firewalls are not appearing in Panorama.

Which action would enable the firewalls to send their pre-existing logs to Panorama?

Use the import option to pull logs into Panorama.
A CLI command will forward the pre-existing logs to Panorama.
Use the ACC to consolidate pre-existing logs.
The log database will need to exported form the firewalls and manually imported into Panorama.

Answer(s): B

Reveal Solution Next Question

QUESTION: 39

A Palo Alto Networks NGFW just submitted a file to WildFire for analysis. Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.

How quickly will the firewall receive back a verdict?

More than 15 minutes
5 minutes
10 to 15 minutes
5 to 10 minutes

Answer(s): D

Reveal Solution Next Question

QUESTION: 40

What are the differences between using a service versus using an application for Security Policy match?

Use of a “service” enables the firewall to take immediate action with the first observed packet based on port numbers. Use of an “application” allows the firewall to take immediate action if the port being used is a member of the application standard port list.
There are no differences between “service” or “application”. Use of an “application” simplifies configuration by allowing use of a friendly application name instead of port numbers.
Use of a “service” enables the firewall to take immediate action with the first observed packet based on port numbers. Use of an “application” allows the firewall to take action after enough packets allow for App-ID identification regardless of the ports being used
Use of a “service” enables the firewall to take action after enough packets allow for App-ID identification

Answer(s): C

Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/app-id/app-id-overview

Reveal Solution Next Question

Free PCNSE Exam Braindumps (page: 10)

QUESTION: 37

QUESTION: 38

QUESTION: 39

QUESTION: 40

Reference: