Free PCNSE Exam Braindumps
Palo Alto Networks Certified Network Security Engineer Questions 206–210 (page: 43)

Updated On: 10-Feb-2026

Given the following configuration, which route is used for destination 10.10.0.4?

set network virtual-router 2 routing-table ip static-route "Route 1" nexthop ip-address 192.168.1.2
set network virtual-router 2 routing-table ip static-route "Route 1" metric 30
set network virtual-router 2 routing-table ip static-route "Route 1" destination 10.10.0.0/24
set network virtual-router 2 routing-table ip static-route "Route 1" re
route-table unicast
set network virtual-router 2 routing-table ip static-route "Route 2" nexthop ip-address 192.168.1.2
set network virtual-router 2 routing-table ip static-route "Route 2" metric 20
set network virtual-router 2 routing-table ip static-route "Route 2" destination 10.10.0.0/24
set network virtual-router 2 routing-table ip static-route "Route 2" route-table unicast
set network virtual-router 2 routing-table ip static-route "Route 3" nexthop ip-address 10.10.20.1
set network virtual-router 2 routing-table ip static-route "Route 3" metric 5
set network virtual-router 2 routing-table ip static-route "Route 3" destination 0.0.0.0/0
set network virtual-router 2 routing-table ip static-route "Route 3" route-table unicast
set network virtual-router 2 routing-table ip static-route "Route 4" nexthop ip-address 192.168.1.2
set network virtual-router 2 routing-table ip static-route "Route 4" metric 10
set network virtual-router 2 routing-table ip static-route "Route 4" destination 10.10.1.0/25
set network virtual-router 2 routing-table ip static-route "Route 4" route-table unicast

  1. Route 1
  2. Route 3
  3. Route 2
  4. Route 4

Answer(s): C


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/network/network-virtual-routers/more-runtime-stats-for-a-virtual-router/routing-tab.html



In SSL Forward Proxy decryption, which two certificates can be used for certificate signing? (Choose two.)

  1. self-signed CA certificate
  2. server certificate
  3. wildcard server certificate
  4. client certificate
  5. enterprise CA certificate

Answer(s): A,E


Reference:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/configure-ssl-forward-proxy#:~:text=You%20can%20use%20an%20enterprise,as%20the%20forward%20trust%20certificate.



An administrator plans to deploy 15 firewalls to act as GlobalProtect gateways around the world. Panorama will manage the firewalls.

The firewalls will provide access to mobile users and act as edge locations to on-premises infrastructure. The administrator wants to scale the configuration out quickly and wants all of the firewalls to use the same template configuration.

Which two solutions can the administrator use to scale this configuration? (Choose two.)

  1. virtual systems
  2. template stacks
  3. variables
  4. collector groups

Answer(s): A,B


Reference:

https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks



Which three statements accurately describe Decryption Mirror? (Choose three.)

  1. Decryption, storage, inspection, and use of SSL traffic regulated in certain countries.
  2. You should consult with your corporate counsel before activating and using Decryption Mirror in a production environment.
  3. Decryption Mirror requires a tap interface on the firewall.
  4. Only management consent is required to use the Decryption Mirror future.
  5. Use of Decryption Mirror might enable malicious users with administrative access to the firewall to harvest sensitive information that is submitted via an encrypted channel.

Answer(s): A,B,E


Reference:

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-concepts/decryption-mirroring



As a best practice, which URL category should you target first for SSL decryption?

  1. Health and Medicine
  2. High Risk
  3. Online Storage and Backup
  4. Financial Services

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/best-practices/8-1/decryption-best-practices/decryption-best-practices/deploy-ssl-decryption-using-best-practices.html



Viewing page 43 of 123
Viewing questions 211 - 215 out of 606 questions


Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!