CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSE

Free PCNSE Exam Braindumps (page: 42)

Page 22 of 152
PDF with 619 Questions

Which processing order will be enabled when a Panorama administrator selects the setting “Objects defined in ancestors will take higher precedence?”

  1. Descendant objects will take precedence over other descendant objects.
  2. Descendant objects will take precedence over ancestor objects.
  3. Ancestor objects will have precedence over descendant objects.
  4. Ancestor objects will have precedence over other ancestor objects.

Answer(s): C


Reference:

https://www.paloaltonetworks.com/documentation/80/pan-os/web-interface-help/device/device-setup-management



An administrator using an enterprise PKI needs to establish a unique chain of trust to ensure mutual authentication between Panorama and the managed firewalls and Log Collectors.

How would the administrator establish the chain of trust?

  1. Use custom certificates
  2. Enable LDAP or RADIUS integration
  3. Set up multi-factor authentication
  4. Configure strong password authentication

Answer(s): A


Reference:

https://www.paloaltonetworks.com/documentation/80/panorama/panorama_adminguide/panorama- overview/plan-your-panorama-deployment



What will be the egress interface if the traffic’s ingress interface is ethernet1/6 sourcing from 192.168.111.3 and to the destination 10.46.41.113 during the time shown in the image?

  1. ethernet1/7
  2. ethernet1/5
  3. ethernet1/6
  4. ethernet1/3

Answer(s): D



Refer to the exhibit.


A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?

  1. Untrust (any) to Untrust (10.1.1.100), web browsing – Allow
  2. Untrust (any) to Untrust (1.1.1.100), web browsing – Allow
  3. Untrust (any) to DMZ (1.1.1.100), web browsing – Allow
  4. Untrust (any) to DMZ (10.1.1.100), web browsing – Allow

Answer(s): C






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Exam Discussions & Posts