support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Palo Alto Networks
  4. PCNSE

Free PCNSE Exam Braindumps
Palo Alto Networks Certified Network Security Engineer Questions 161–165 (page: 34)

Updated On: 10-Feb-2026
Page 34 of 123
PDF with 606 Questions

Which two events trigger the operation of automatic commit recovery? (Choose two.)

  1. when an aggregate Ethernet interface component fails
  2. when Panorama pushes a configuration
  3. when a firewall performs a local commit
  4. when a firewall HA pair fails over

Answer(s): B,C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/panorama-features/automatic-panorama-connection-recovery.html



Panorama provides which two SD-WAN functions? (Choose two.)

  1. network monitoring
  2. control plane
  3. data plane
  4. physical network links

Answer(s): A,B



Updates to dynamic user group membership are automatic therefore using dynamic user groups instead of static group objects allows you to:

  1. respond to changes in user behaviour or potential threats using manual policy changes
  2. respond to changes in user behaviour or potential threats without manual policy changes
  3. respond to changes in user behaviour or potential threats without automatic policy changes
  4. respond to changes in user behaviour and confirmed threats with manual policy changes

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/policy/use-dynamic-user-groups-in-policy.html



How can an administrator configure the NGFW to automatically quarantine a device using GlobalProtect?

  1. by adding the device’s Host ID to a quarantine list and configureGlobalProtect to prevent users from connecting to the GlobalProtect gateway from a quarantined device
  2. by exporting the list of quarantined devices to a pdf or csv file by selecting PDF/CSV at the bottom of the Device Quarantine page and leveraging the appropriate XSOAR playbook
  3. by using security policies, log forwarding profiles, and log settings
  4. there is no native auto-quarantine feature so a custom script would need to be leveraged

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/globalprotect/10-0/globalprotect-admin/host-information/quarantine-devices-using-host-information/automatically-quarantine-a-device



To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, you can configure:

  1. PBP (Protocol Based Protection)
  2. BGP (Border Gateway Protocol)
  3. PGP (Packet Gateway Protocol)
  4. PBP (Packet Buffer Protection)

Answer(s): D


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection



  PDF
Viewing page 34 of 123
Viewing questions 166 - 170 out of 606 questions


Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!