Free PCNSE Exam Braindumps (page: 36)

Page 35 of 152

A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-home or beacon out to external command-and-control (C2) servers.

Which Security Profile type will prevent these behaviors?

  1. Anti-Spyware
  2. WildFire
  3. Vulnerability Protection
  4. Antivirus

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/anti-spyware-profiles



What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

  1. Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.
  2. An administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 8.1 state.
  3. When Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.
  4. Administrators need to manually update variable characters to those used in pre-PAN-OS 8.1.

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/upgrade-to-pan-os-81/upgradedowngrade-considerations



Which two methods can be configured to validate the revocation status of a certificate? (Choose two.)

  1. CRL
  2. CRT
  3. OCSP
  4. Cert-Validation-Profile
  5. SSL/TLS Service Profile

Answer(s): A,C


Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/certificate-management/set-up-verification-for-certificate-revocation-status



Which administrative authentication method supports authorization by an external service?

  1. Certificates
  2. LDAP
  3. RADIUS
  4. SSH keys

Answer(s): C


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/firewall-administration/manage-firewall-administrators/administrative-authentication






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Discussions & Posts