CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSE

Free PCNSE Exam Braindumps (page: 63)

Page 62 of 152
PDF with 619 Questions

DRAG DROP (Drag and Drop is not supported)
Place the steps to onboard a ZTP firewall into Panorama/CSP/ZTP-Service in the correct order.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.paloaltonetworks.com/panorama/9-1/panorama-admin/manage-firewalls/set-up-zero-touch-provisioning/ztp-overview/ztp-configuration-elements.html



Which of the following commands would you use to check the total number of the sessions that are currently going through SSL Decryption processing?

  1. show session all filter ssl-decryption yes total-count yes
  2. show session all ssl-decrypt yes count yes
  3. show session all filter ssl-decrypt yes count yes
  4. show session filter ssl-decryption yes total-count yes

Answer(s): C


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClF2CAK





Refer to the image. An administrator is tasked with correcting an NTP service configuration for firewalls that cannot use the Global template NTP servers. The administrator needs to change the IP address to a preferable server for this template stack but cannot impact other template stacks.

How can the issue be corrected?

  1. Override the value on the NYCFW template.
  2. Override a template value using a template stack variable.
  3. Override the value on the Global template.
  4. Enable "objects defined in ancestors will take higher precedence" under Panorama settings.

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/panorama-overview/centralized-firewall-configuration-and-update-management/templates-and-template-stacks



While troubleshooting an SSL Forward Proxy decryption issue, which PAN-OS CLI command would you use to check the details of the end entity certificate that is signed by the Forward Trust Certificate or Forward Untrust Certificate?

  1. show system setting ssl-decrypt certs
  2. show system setting ssl-decrypt certificate
  3. debug dataplane show ssl-decrypt ssl-stats
  4. show system setting ssl-decrypt certificate-cache

Answer(s): B


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClF2CAK






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Exam Discussions & Posts