Category PCNSC

NEW QUESTION 10
An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.
Which configuration will enable this HA scenario?

NEW QUESTION 11
An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.) A)

B)

C)

D)

NEW QUESTION 12
In Panorama the web interface displays the security rules in evaluation order Organize the security rules m the order in which they will be evaluated?

NEW QUESTION 13
Which of the following must be enabled to use Threat Prevention features such as Anti-Virus and Anti-Spyware on a firewall?

NEW QUESTION 14
View the GlobalProtect configuration screen capture.
What is the purpose of this configuration?

NEW QUESTION 15
Which two types of security profiles are recommended to protect against known and unknown threats?
(Choose two)

NEW QUESTION 16
How can you ensure that a Palo Alto Networks firewall does not block traffic during a software update?

NEW QUESTION 17
What will be the egress interface if the traffic’s ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.

NEW QUESTION 18
An administrator has users accessing network resources through Citrix XenApp 7 .x. Which User-ID mapping solution will map multiple mat who using Citrix to connect to the network and access resources?

NEW QUESTION 19
Which two subscriptions are available when configuring panorama to push dynamic updates to connected devices? (Choose two.)

NEW QUESTION 20
Refer to the exhibit.

A web server in the DMZ is being mapped to a public address through DNAT.
Which Security policy rule will allow traffic to flow to the web server?

NEW QUESTION 21
SSL Forward Proxy decryption is enabled on (he firewall When clients use Chrome to browse to HTTPS sites, the firewall returns the Forward Trust certificate, even when accessing websites with invalid certificates The clients need to be presented with a browser warning error with the option to proceed to websites with invalid certificates Which two options will satisfy this requirement? (Choose two.)

NEW QUESTION 22
Which three options are supposed in HA Lite? (Choose three.)

NEW QUESTION 23
The administrator has enabled BGP on a virtual router on the Palo Alto Networks NGFW, but new routes do not seem to be populating the virtual router.
Which two options would help the administrator Troubleshoot this issue? (Choose two.)

NEW QUESTION 24
A Palo Alto Networks NGFW just submitted a file lo WildFire tor analysis Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.
How quickly will the firewall receive back a verdict?

NEW QUESTION 25
A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.
How would an administrator configure the interface to IGbps?

NEW QUESTION 26
Refer to the exhibit.

An administrator cannot see any of the Traffic logs from the Palo Alto Networks NGFW on Panorama. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?
A)

B)

C)

D)

NEW QUESTION 27
What is the maximum number of virtual systems supported by a Palo Alto Networks VM-300 firewall?

NEW QUESTION 28
Which version of Global Protect supports split tunneling based on destination domain, client process, and HTTP/HTTPs video streaming application?

NEW QUESTION 29
If the firewall is configured for credential phishing prevention using the “Domain Credential Filter” method, which login will be detected as credential theft?

NEW QUESTION 30
Which touting configuration should you recommend lo a customer who wishes lo actively use multiple pathways to the same destination?