Free PCNSE Exam Braindumps
Palo Alto Networks Certified Network Security Engineer Questions 136–140 (page: 29)

Updated On: 10-Feb-2026

An administrator deploys PA-500 NGFWs as an active/passive high availability pair. The devices are not participating in dynamic routing, and preemption is disabled.

What must be verified to upgrade the firewalls to the most recent version of PAN-OS® software?

  1. Antivirus update package.
  2. Applications and Threats update package.
  3. User-ID agent.
  4. WildFire update package.

Answer(s): B


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/upgrade-to-pan-os-80/upgrade-the-firewall-to-pan-os-80/upgrade-an-ha-firewall-pair-to-pan-os-80



A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-home or beacon out to external command-and-control (C2) servers.

Which Security Profile type will prevent these behaviors?

  1. Anti-Spyware
  2. WildFire
  3. Vulnerability Protection
  4. Antivirus

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles



What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

  1. Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.
  2. An administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 8.1 state.
  3. When Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.
  4. Administrators need to manually update variable characters to those used in pre-PAN-OS 8.1.

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/upgrade-to-pan-os-81/upgradedowngrade-considerations



Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)

  1. CRL
  2. CRT
  3. OCSP
  4. Cert-Validation-Profile
  5. SSL/TLS Service Profile

Answer(s): A,C


Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/certificate-management/set-up-verification-for-certificate-revocation-status



Which administrative authentication method supports authorization by an external service?

  1. Certificates
  2. LDAP
  3. RADIUS
  4. SSH keys

Answer(s): C


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/firewall-administration/manage-firewall-administrators/administrative-authentication



Viewing page 29 of 123
Viewing questions 141 - 145 out of 606 questions


Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!