Free PCNSE Exam Braindumps
Palo Alto Networks Certified Network Security Engineer Questions 316–320 (page: 65)

Updated On: 10-Feb-2026

DRAG DROP (Drag and Drop is not supported)
An engineer is troubleshooting traffic routing through the virtual router. The firewall uses multiple routing protocols, and the engineer is trying to determine routing priority.

Match the default Administrative Distances for each routing protocol.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Which feature of Panorama allows an administrator to create a single network configuration that can be reused repeatedly for large-scale deployments even if values of configured objects, such as routes and interface addresses, change?

  1. template variables
  2. the ‘Shared’ device group
  3. template stacks
  4. a device group

Answer(s): A



An engineer wants to implement the Palo Alto Networks firewall in VWire mode on the internet gateway and wants to be sure of the features that are supported on the VWire interface.

What are three supported features on the VWire interface? (Choose three.)

  1. IPSec
  2. OSPF
  3. SSL Decryption
  4. QoS
  5. NAT

Answer(s): C,D,E



A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the configuration on the local firewall, the engineer discovers that some settings are not being applied as intended.

The setting values from the "Global" template are applied to the firewall instead of the "Local" template that has different values for the same settings.

What should be done to ensure that the settings in the "Local" template are applied while maintaining settings from both templates?

  1. Move the "Local" template above the "Global" template in the template stack.
  2. Perform a commit and push with the "Force Template Values" option selected.
  3. Override the values on the local firewall and apply the correct settings for each value.
  4. Move the "Global" template above the "Local" template in the template stack.

Answer(s): A



A network administrator wants to deploy SSL Inbound Inspection. What two attributes should the required certificate have? (Choose two.)

  1. a client certificate
  2. a private key
  3. a server certificate
  4. a subject alternative name

Answer(s): B,C



Viewing page 65 of 123
Viewing questions 321 - 325 out of 606 questions


Post your Comments and Discuss Palo Alto Networks PCNSE exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!