Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSE

Palo Alto Networks PCNSE Exam
Palo Alto Networks Certified Network Security Engineer (Page 4 )

Updated On: 12-Feb-2026
Page 4 of 123
PDF with 606 Questions

Which method will dynamically register tags on the Palo Alto Networks NGFW?

  1. Restful API or the VMware API on the firewall or on the User-ID agent or the ready-only domain controller
    (RODC)
  2. Restful API or the VMware API on the firewall or on the User-ID agent
  3. XML API or the VMware API on the firewall or on the User-ID agent or the CLI
  4. XML API or the VM Monitoring agent on the NGFW or on the User-ID agent

Answer(s): D


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/policy/register-ip-addresses-and-tags-dynamically



How does an administrator schedule an Applications and Threats dynamic update while delaying installation of the update for a certain amount of time?

  1. Configure the option for “Threshold”.
  2. Disable automatic updates during weekdays.
  3. Automatically “download only” and then install Applications and Threats later, after the administrator approves the update.
  4. Automatically “download and install” but with the “disable new applications” option used.

Answer(s): A



To connect the Palo Alto Networks firewall to AutoFocus, which setting must be enabled?

  1. Device>Setup>Services>AutoFocus
  2. Device> Setup>Management >AutoFocus
  3. AutoFocus is enabled by default on the Palo Alto Networks NGFW
  4. Device>Setup>WildFire>AutoFocus
  5. Device>Setup> Management> Logging and Reporting Settings

Answer(s): B


Reference:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/getting-started/enable-autofocus-threat-intelligence



An administrator encountered problems with inbound decryption. Which option should the administrator investigate as part of triage?

  1. Security policy rule allowing SSL to the target server
  2. Firewall connectivity to a CRL
  3. Root certificate imported into the firewall with “Trust” enabled
  4. Importation of a certificate from an HSM

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/decryption/configure-ssl-inbound-inspection



Which two virtualization platforms officially support the deployment of Palo Alto Networks VM-Series firewalls? (Choose two.)

  1. Red Hat Enterprise Virtualization (RHEV)
  2. Kernel Virtualization Module (KVM)
  3. Boot Strap Virtualization Module (BSVM)
  4. Microsoft Hyper-V

Answer(s): B,D


Reference:

https://www.paloaltonetworks.com/products/secure-the-network/virtualized-next-generation-firewall/vm-series






Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

Join the PCNSE Discussion