CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Palo Alto Networks
  5. PCNSE

Free PCNSE Exam Braindumps (page: 64)

Page 63 of 152
PDF with 619 Questions

Which action disables Zero Touch Provisioning (ZTP) functionality on a ZTP firewall during the onboarding process?

  1. removing the Panorama serial number from the ZTP service
  2. performing a factory reset of the firewall
  3. performing a local firewall commit
  4. removing the firewall as a managed device in Panorama

Answer(s): C


Reference:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001UiOCAU&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail



In URL filtering, which component matches URL patterns?

  1. live URL feeds on the management plane
  2. security processing on the data plane
  3. single-pass pattern matching on the data plane
  4. signature matching on the data plane

Answer(s): B



In a template, you can configure which two objects? (Choose two.)

  1. Monitor profile
  2. application group
  3. SD-WAN path quality profile
  4. IPsec tunnel

Answer(s): A,D



An organization's administrator has the funds available to purchase more firewalls to increase the organization's security posture.

The partner SE recommends placing the firewalls as close as possible to the resources that they protect.
Is the SE's advice correct, and why or why not?

  1. No. Firewalls provide new defense and resilience to prevent attackers at every stage of the cyberattack lifecycle, independent of placement.
  2. Yes. Firewalls are session-based, so they do not scale to millions of CPS.
  3. No. Placing firewalls in front of perimeter DDoS devices provides greater protection for sensitive devices inside the network.
  4. Yes. Zone Protection profiles can be tailored to the resources that they protect via the configuration of specific device types and operating systems.

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection.html






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Exam Discussions & Posts