Free PCNSE Exam Braindumps (page: 40)

Page 39 of 152

The firewall is not downloading IP addresses from MineMeld. Based on the image, what most likely is wrong?

  1. A Certificate Profile that contains the client certificate needs to be selected.
  2. The source address supports only files hosted with an ftp://<address/file>.
  3. External Dynamic Lists do not support SSL connections.
  4. A Certificate Profile that contains the CA certificate needs to be selected.

Answer(s): D


Reference:

https://live.paloaltonetworks.com/t5/MineMeld-Articles/Connecting-PAN-OS-to-MineMeld-using-External-Dynamic-Lists/ta-p/190414



Which three split tunnel methods are supported by a GlobalProtect Gateway? (Choose three.)

  1. video streaming application
  2. Client Application Process
  3. Destination Domain
  4. Source Domain
  5. Destination user/group
  6. URL Category

Answer(s): A,B,C


Reference:

https://www.paloaltonetworks.com/documentation/81/pan-os/newfeaturesguide/globalprotect-features/split-tunnel-for-public-applications



Which two are valid ACC GlobalProtect Activity tab widgets? (Choose two.)

  1. Successful GlobalProtect Deployed Activity
  2. GlobalProtect Deployment Activity
  3. Successful GlobalProtect Connection Activity
  4. GlobalProtect Quarantine Activity

Answer(s): B,C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/globalprotect-features/enhanced-logging-for-globalprotect.html



Which two features can be used to tag a username so that it is included in a dynamic user group? (Choose two.)

  1. log forwarding auto-tagging
  2. XML API
  3. GlobalProtect agent
  4. User-ID Windows-based agent

Answer(s): B,D


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-new-features/user-id-features/dynamic-user-groups.html






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Discussions & Posts