Free PCNSE Exam Braindumps (page: 23)

Page 23 of 152

Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a “No Decrypt” action? (Choose two.)

  1. Block sessions with expired certificates
  2. Block sessions with client authentication
  3. Block sessions with unsupported cipher suites
  4. Block sessions with untrusted issuers
  5. Block credential phishing

Answer(s): A,D


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/decryption/define-traffic-to-decrypt/create-a-decryption-profile



Which User-ID method should be configured to map IP addresses to usernames for users connected through a terminal server?

  1. port mapping
  2. server monitoring
  3. client probing
  4. XFF headers

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/user-id/configure-user-mapping-for-terminal-server-users



Which feature can be configured on VM-Series firewalls?

  1. aggregate interfaces
  2. machine learning
  3. multiple virtual systems
  4. GlobalProtect

Answer(s): D



In High Availability, which information is transferred via the HA data link?

  1. session information
  2. heartbeats
  3. HA state information
  4. User-ID information

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/high-availability/ha-concepts/ha-links-and-backup-links



Page 23 of 152



Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

Lee commented on November 27, 2024
So far so good
UNITED STATES
upvote

Naredn commented on November 22, 2024
Best practices at one place
Anonymous
upvote

Dan commented on September 08, 2024
So far so good
Anonymous
upvote

Eric commented on December 13, 2023
Works great
Anonymous
upvote