Free PCNSE Exam Braindumps (page: 22)

Page 21 of 152

Which processing order will be enabled when a Panorama administrator selects the setting “Objects defined in ancestors will take higher precedence?”

  1. Descendant objects will take precedence over other descendant objects.
  2. Descendant objects will take precedence over ancestor objects.
  3. Ancestor objects will have precedence over descendant objects.
  4. Ancestor objects will have precedence over other ancestor objects.

Answer(s): C


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/device/device-setup-management



An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors.

How would the administrator establish the chain of trust?

  1. Use custom certificates
  2. Enable LDAP or RADIUS integration
  3. Set up multi-factor authentication
  4. Configure strong password authentication

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/80/panorama/panorama_adminguide/panorama- overview/plan-your-panorama-deployment



What will be the egress interface if the traffic’s ingress interface is ethernet1/6 sourcing from 192.168.111.3 and to the destination 10.46.41.113 during the time shown in the image?

  1. ethernet1/7
  2. ethernet1/5
  3. ethernet1/6
  4. ethernet1/3

Answer(s): D



Refer to the exhibit.


A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?

  1. Untrust (any) to Untrust (10.1.1.100), web browsing – Allow
  2. Untrust (any) to Untrust (1.1.1.100), web browsing – Allow
  3. Untrust (any) to DMZ (1.1.1.100), web browsing – Allow
  4. Untrust (any) to DMZ (10.1.1.100), web browsing – Allow

Answer(s): C






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Discussions & Posts