Free PCNSE Exam Braindumps
Palo Alto Networks Certified Network Security Engineer Questions 186–190 (page: 39)

Updated On: 10-Feb-2026

When overriding a template configuration locally on a firewall, what should you consider?

  1. Panorama will update the template with the overridden value.
  2. The firewall template will show that it is out of sync within Panorama.
  3. Only Panorama can revert the override.
  4. Panorama will lose visibility into the overridden configuration.

Answer(s): D



When setting up a security profile, which three items can you use? (Choose three.)

  1. Wildfire analysis
  2. anti-ransomware
  3. antivirus
  4. URL filtering
  5. decryption profile

Answer(s): A,C,D


Reference:

https://manualzz.com/doc/10741747/pan%E2%80%90os-administrator%E2%80%99s-guide-policy



An administrator wants to upgrade a firewall HA pair to PAN-OS 10.1. The firewalls are currently running PAN-OS 8.1.17. Which upgrade path maintains synchronization of the HA session (and prevents network outage)?

  1. Upgrade directly to the target major version.
  2. Upgrade the HA pair to a base image.
  3. Upgrade one major version at a time.
  4. Upgrade two major versions at a time.

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-upgrade/upgrade-pan-os/upgrade-the-firewall-pan-os/determine-the-upgrade-path.html



What are three types of Decryption Policy rules? (Choose three.)

  1. SSL Inbound Inspection
  2. SSH Proxy
  3. SSL Forward Proxy
  4. Decryption Broker
  5. Decryption Mirror

Answer(s): A,B,C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/decryption/decryption-overview.html#:~:text=The%20firewall%20provides%20three%20types,to%20control%20tunneled%20SSH%20traffic



During SSL decryption, which three factors affect resource consumption? (Choose three.)

  1. key exchange algorithm
  2. transaction size
  3. TLS protocol version
  4. applications ta non-standard ports
  5. certificate issuer

Answer(s): A,B,C


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/prepare-to-deploy-decryption/size-the-decryption-firewall-deployment



Viewing page 39 of 123
Viewing questions 191 - 195 out of 606 questions


Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!