Free PCNSE Exam braindumps download (PCNSE exam dumps Free)

QUESTION: 231

An enterprise Information Security team has deployed policies based on AD groups to restrict user access to critical infrastructure systems. However, a recent phishing campaign against the organization has prompted information Security to look for more controls that can secure access to critical assets. For users that need to access these systems, Information Security wants to use PAN-OS multi-factor authentication (MFA) integration to enforce MFA.

What should the enterprise do to use PAN-OS MFA?

Use a Credential Phishing agent to detect, prevent, and mitigate credential phishing campaigns.
Create an authentication profile and assign another authentication factor to be used by a Captive Portal authentication policy.
Configure a Captive Portal authentication policy that uses an authentication sequence.
Configure a Captive Portal authentication policy that uses an authentication profile that references a RADIUS profile.

Answer(s): B

Show Answer Next Question

QUESTION: 232

An administrator wants to enable zone protection.
Before doing so, what must the administrator consider?

Activate a zone protection subscription.
Security policy rules do not prevent lateral movement of traffic between zones.
The zone protection profile will apply to all interfaces within that zone.
To increase bandwidth, no more than one firewall interface should be connected to a zone.

Answer(s): C

Reference:

https://live.paloaltonetworks.com/t5/general-topics/apply-zone-protection-to-which-zone/td-p/36113

Show Answer Next Question

QUESTION: 233

When you import the configuration of an HA pair into Panorama, how do you prevent the import from affecting ongoing traffic?

Disable H
Disable the HA2 link.
Set the passive link state to "shutdown."
Disable config sync.

Answer(s): D

Reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/transition-a-firewall-to-panorama-management/migrate-a-firewall-ha-pair-to-panorama-management.html

Show Answer Next Question

QUESTION: 234

Before you upgrade a Palo Alto Networks NGFW, what must you do?

Make sure that the PAN-OS support contract is valid for at least another year.
Export a device state of the firewall.
Make sure that the firewall is running a supported version of the app + threat update.
Make sure that the firewall is running a version of antivirus software and a version of WildFire that support the licensed subscriptions.

Answer(s): C

Show Answer Next Question