Free PCNSE Exam Braindumps
Palo Alto Networks Certified Network Security Engineer Questions 266–270 (page: 55)

Updated On: 10-Feb-2026

Cortex XDR notifies an administrator about grayware on the endpoints. There are no entries about grayware in any of the logs of the corresponding firewall. Which setting can the administrator configure on the firewall to log grayware verdicts?

  1. in Threat General Settings, select "Report Grayware Files"
  2. within the log settings option in the Device tab
  3. in WildFire General Settings, select "Report Grayware Files"
  4. within the log forwarding profile attached to the Security policy rule

Answer(s): C



Your company has 10 Active Directory domain controllers spread across multiple WAN links. All users authenticate to Active Directory. Each link has substantial network bandwidth to support all mission-critical applications. The firewall's management plane is highly utilized. Given this scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

  1. PAN-OS integrated agent
  2. Citrix terminal server agent with adequate data-plane resources
  3. Captive Portal
  4. Windows-based User-ID agent on a standalone server

Answer(s): D



Which component enables you to configure firewall resource protection settings?

  1. DoS Protection Profile
  2. QoS Profile
  3. Zone Protection Profile
  4. DoS Protection policy

Answer(s): A



How can an administrator use the Panorama device-deployment option to update the apps and threat version of an HA pair of managed firewalls?

  1. Choose the download and install action for both members of the HA pair in the Schedule object
  2. Switch context to the firewalls to start the download and install process
  3. Download the apps to the primary no further action is required
  4. Configure the firewall's assigned template to download the content updates

Answer(s): A



A Panorama administrator configures a new zone and uses the zone in a new Security policy. After the administrator commits the configuration to Panorama, which device-group commit push operation should the administrator use to ensure that the push is successful?

  1. merge with candidate config
  2. include device and network templates
  3. specify the template as a reference template
  4. force template values

Answer(s): B



Viewing page 55 of 123
Viewing questions 271 - 275 out of 606 questions


Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!