Free PCNSE Exam Braindumps (page: 39)

Page 38 of 152

SAML SLO is supported for which two firewall features? (Choose two.)

  1. GlobalProtect Portal
  2. CaptivePortal
  3. WebUI
  4. CLI

Answer(s): A,C


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/authentication/configure-saml-authentication



What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

  1. Rule Usage Hit counter will not be reset
  2. Highlight Unused Rules will highlight all rules.
  3. Highlight Unused Rules will highlight zero rules.
  4. Rule Usage Hit counter will reset.

Answer(s): A,B



Which is not a valid reason for receiving a decrypt-cert-validation error?

  1. Unsupported HSM
  2. Unknown certificate status
  3. Client authentication
  4. Untrusted issuer

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/networking-features/ssl-ssh-session-end-reasons



In the following image from Panorama, why are some values shown in red?

  1. sg2 session count is the lowest compared to the other managed devices.
  2. us3 has a logging rate that deviates from the administrator-configured thresholds.
  3. uk3 has a logging rate that deviates from the seven-day calculated baseline.
  4. sg2 has misconfigured session thresholds.

Answer(s): C


Reference:

https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/panorama-features/device-monitoring-through-panorama






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Discussions & Posts