CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSE

Free PCNSE Exam Braindumps (page: 43)

Page 42 of 152
PDF with 606 Questions

To protect your firewall and network from single source denial of service (DoS) attacks that can overwhelm its packet buffer and cause legitimate traffic to drop, you can configure:

  1. PBP (Protocol Based Protection)
  2. BGP (Border Gateway Protocol)
  3. PGP (Packet Gateway Protocol)
  4. PBP (Packet Buffer Protection)

Answer(s): D


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/zone-defense/packet-buffer-protection



A bootstrap USB flash drive has been prepared using a Windows workstation to load the initial configuration of a Palo Alto Networks firewall that was previously being used in a lab. The USB flash drive was formatted using file system FAT32 and the initial configuration is stored in a file named init-cfg.txt. The firewall is currently running PAN-OS 10.0 and using a lab config. The contents of init-cfg.txt in the USB flash drive are as follows:

The USB flash drive has been inserted in the firewalls’ USB port, and the firewall has been restarted using command: > request restart system

Upon restart, the firewall fails to begin the bootstrapping process. The failure is caused because:

  1. The bootstrap.xml file is a required file, but it is missing
  2. Firewall must be in factory default state or have all private data deleted for bootstrapping
  3. The hostname is a required parameter, but it is missing in init-cfg.txt
  4. PAN-CS version must be 9.1.x at a minimum, but the firewall is running 10.0.x
  5. The USB must be formatted using the ext3 file system. FAT32 is not supported

Answer(s): B



An Administrator is configuring Authentication Enforcement and they would like to create an exemption rule to exempt a specific group from authentication. Which authentication enforcement object should they select?

  1. default-no-captive-portal
  2. default-authentication-bypass
  3. default-browser-challenge
  4. default-web-form

Answer(s): A


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/objects/objects-authentication



A bootstrap USB flash drive has been prepared using a Linux workstation to load the initial configuration of a Palo Alto Networks firewall. The USB flash drive was formatted using file system ntfs and the initial configuration is stored in a file named init-cfg.txt.

The contents of init-cfg.txt in the USB flash drive are as follows:

The USB flash drive has been inserted in the firewalls’ USB port, and the firewall has been powered on. Upon boot, the firewall fails to begin the bootstrapping process. The failure is caused because:

  1. the bootstrap.xml file is a required file, but it is missing
  2. nit-cfg.txt is an incorrect filename, the correct filename should be init-cfg.xml
  3. The USB must be formatted using the ext4 file system
  4. There must be commas between the parameter names and their values instead of the equal symbols
  5. The USB drive has been formatted with an unsupported file system

Answer(s): E






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Exam Discussions & Posts