Free PCNSE Exam Braindumps
Palo Alto Networks Certified Network Security Engineer Questions 296–300 (page: 61)

Updated On: 10-Feb-2026

A customer is replacing their legacy remote access VPN solution. The current solution is in place to secure only Internet egress for the connected clients. Prisma Access has been selected to replace the current remote access VPN solution. During onboarding the following options and licenses were selected and enabled:

- Prisma Access for Remote Networks: 300Mbps
- Prisma Access for Mobile Users: 1500 Users
- Cortex Data Lake: 2TB
- Trusted Zones: trust
- Untrusted Zones: untrust
- Parent Device Group: shared

How can you configure Prisma Access to provide the same level of access as the current VPN solution?

  1. Configure mobile users with trust-to-untrust Security policy rules to allow the desired traffic outbound to the Internet
  2. Configure remote networks with a service connection and trust-to-untrust Security policy rules to allow the desired traffic outbound to the Internet
  3. Configure remote networks with trust-to-trust Security policy rules to allow the desired traffic outbound to the Internet
  4. Configure mobile users with a service connection and trust-to-trust Security policy rules to allow the desired traffic outbound to the Internet

Answer(s): A



An administrator analyzes the following portion of a VPN system log and notices the following issue:

“Received local id 10.10.1.4/24 type IPv4 address protocol 0 port 0, received remote id 10.1.10.4/24 type IPv4 address protocol 0 port 0.”

What is the cause of the issue?

  1. bad local and peer identification IP addresses in the IKE gateway
  2. IPSec crypto profile mismatch
  3. mismatched Proxy-IDs
  4. IPSec protocol mismatch

Answer(s): C



A network security engineer must implement Quality of Service policies to ensure specific levels of delivery guarantees for various applications in the environment. They want to ensure that they know as much as they can about QoS before deploying. Which statement about the QoS feature is correct?

  1. QoS can be used in conjunction with SSL decryption
  2. QoS is only supported on hardware firewalls
  3. QoS is only supported on firewalls that have a single virtual system configured
  4. QoS can be used on firewalls with multiple virtual systems configured

Answer(s): D



What type of address object would be useful for internal devices where the addressing structure assigns meaning to certain bits in the address, as illustrated in the diagram?

  1. IP Netmask
  2. IP Range
  3. IP Address
  4. IP Wildcard Mask

Answer(s): D



Given the following snippet of a WildFire submission log, did the end-user get access to the requested information and why or why not?

  1. No, because WildFire classified the severity as “high”
  2. Yes, because the action is set to “allow”
  3. No, because WildFire categorized a file with the verdict “malicious”
  4. Yes, because the action is set to “alert”

Answer(s): B



Viewing page 61 of 123
Viewing questions 301 - 305 out of 606 questions


Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!