Free PCNSE Exam Braindumps (page: 65)

Page 64 of 152

DRAG DROP (Drag and Drop is not supported)
Match each GlobalProtect component to the purpose of that component.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.paloaltonetworks.com/globalprotect/8-1/globalprotect-admin/globalprotect-overview/about-the-globalprotect-components.html



An administrator needs to validate that policies that will be deployed will match the appropriate rules in the device-group hierarchy.

Which tool can the administrator use to review the policy creation logic and verify that unwanted traffic is not allowed?

  1. Preview Changes
  2. Policy Optimizer
  3. Managed Devices Health
  4. Test Policy Match

Answer(s): A



What is a key step in implementing WildFire best practices?

  1. Configure the firewall to retrieve content updates every minute.
  2. Ensure that a Threat Prevention subscription is active.
  3. In a mission-critical network, increase the WildFire size limits to the maximum value.
  4. n a security-first network, set the WildFire size limits to the minimum value.

Answer(s): B


Reference:

https://docs.paloaltonetworks.com/wildfire/9-1/wildfire-admin/wildfire-deployment-best-practices/wildfire-best-practices



What happens when an A/P firewall cluster synchronizes IPsec tunnel security associations (SAs)?

  1. Phase 2 SAs are synchronized over HA2 links.
  2. Phase 1 and Phase 2 SAs are synchronized over HA2 links.
  3. Phase 1 SAs are synchronized over HA1 links.
  4. Phase 1 and Phase 2 SAs are synchronized over HA3 links.

Answer(s): A






Post your Comments and Discuss Palo Alto Networks PCNSE exam with other Community members:

PCNSE Exam Discussions & Posts