CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSE

Free PCNSE Exam Braindumps (page: 33)

Page 32 of 152
PDF with 606 Questions

The firewall determines if a packet is the first packet of a new session or if a packet is part of an existingsession using which kind of match?

  1. 6-tuple match:
    Source IP Address, Destination IP Address, Source Port, Destination Port, Protocol, and Source Security Zone
  2. 5-tuple match:
    Source IP Address, Destination IP Address, Source Port, Destination Port, Protocol
  3. 7-tuple match:
    Source IP Address, Destination IP Address, Source Port, Destination Port, Source User, URL Category, and Source Security Zone
  4. 9-tuple match:
    Source IP Address, Destination IP Address, Source Port, Destination Port, Source User, Source Security Zone, Destination Security Zone, Application, and URL Category

Answer(s): A



Which GlobalProtect Client connect method requires the distribution and use of machine certificates?

  1. At-boot
  2. Pre-logon
  3. User-logon (Always on)
  4. On-demand

Answer(s): B



Which feature can provide NGFWs with User-ID mapping information?

  1. Web Captcha
  2. Native 802.1q authentication
  3. GlobalProtect
  4. Native 802.1x authentication

Answer(s): C



Which Panorama administrator types require the configuration of at least one access domain? (Choose two.)

  1. Role Based
  2. Custom Panorama Admin
  3. Device Group
  4. Dynamic
  5. Template Admin

Answer(s): C,E






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Discussions & Posts