QUESTION: 49

A client is concerned about resource exhaustion because of denial-of-service attacks against their DNS servers.Which option will protect the individual servers?

Enable packet buffer protection on the Zone Protection Profile.
Apply an Anti-Spyware Profile with DNS sinkholing.
Use the DNS App-ID with application-default.
Apply a classified DoS Protection Profile.

Answer(s): D

Reveal Solution Next Question

QUESTION: 50

If the firewall is configured for credential phishing prevention using the “Domain Credential Filter” method, which login will be detected as credential theft?

Mapping to the IP address of the logged-in user.
First four letters of the username matching any valid corporate username.
Using the same user’s corporate username and password.
Matching any valid corporate username.

Answer(s): C

Reveal Solution Next Question

An administrator has users accessing network resources through Citrix XenApp 7.x.

Which User-ID mapping solution will map multiple users who are using Citrix to connect to the network and access resources?

Client Probing
Terminal Services agent
GlobalProtect
Syslog Monitoring

Answer(s): B

Reveal Solution Next Question

QUESTION: 52

An administrator needs to upgrade a Palo Alto Networks NGFW to the most current version of PAN-OS® software. The firewall has internet connectivity through an Ethernet interface, but no internet connectivity from the management interface. The Security policy has the default security rules and a rule that allows all web- browsing traffic from any to any zone.

What must the administrator configure so that the PAN-OS® software can be upgraded?

Security policy rule
CRL
Service route
Scheduler

Answer(s): C

Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clp3CAC

Reveal Solution Next Question

Free PCNSE Exam Braindumps (page: 13)

QUESTION: 49

QUESTION: 50

QUESTION: 51

QUESTION: 52

Reference: