최신 PCNSE 무료덤프 - Palo Alto Networks Certified Network Security Engineer

문제1

Refer to the exhibit.

Based on the screenshots above what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?

A. shared pre-rules
DATACENTER_DG pre-rules
rules configured locally on the firewall
DATACENTER_DG post-rules
shared post-rules
shared default rules

B. shared pre-rules
DATACENTER_DG pre-rules
rules configured locally on the firewall
shared post-rules
DATACENTER.DG post-rules
shared default rules

C. shared pre-rules
DATACENTER_DG pre-rules
rules configured locally on the firewall
DATACENTER_DG post-rules
shared post-rules
DATACENTER_DG default rules

D. shared pre-rules
DATACENTER DG pre rules
rules configured locally on the firewall
shared post-rules
DATACENTER_DG post-rules
DATACENTER.DG default rules

정답: D

문제2

Which two policy components are required to block traffic in real time using a dynamic user group (DUG)?
(Choose two.)

A. An Allow policy for the initial traffic

B. A Deny policy with the "tag" App-ID to block the tagged traffic

C. A Deny policy for the tagged traffic

D. A Decryption policy to decrypt the traffic and see the tag

정답: A,B

설명: (DumpTOP 회원만 볼 수 있음)

문제3

During the process of developing a decryption strategy and evaluating which websites are required for corporate users to access, several sites have been identified that cannot be decrypted due to technical reasons.
In this case, the technical reason is unsupported ciphers Traffic to these sites will therefore be blocked if decrypted.
How should the engineer proceed?

A. Add the sites to the SSL Decryption Exclusion list to exempt them from decryption.

B. Create a Security policy to allow access to those sites.

C. Install the unsupported cipher into the firewall to allow the sites to be decrypted

D. Allow the firewall to block the sites to improve the security posture.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제4

An engineer is troubleshooting a traffic-routing issue.
What is the correct packet-flow sequence?

A. PBF > Zone Protection Profiles > Packet Buffer Protection

B. NAT > Security policy enforcement > OSPF

C. PBF > Static route > Security policy enforcement

D. BGP > PBF > NAT

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제5

The decision to upgrade PAN-OS has been approved. The engineer begins the process by upgrading the Panorama servers, but gets an error when attempting the install.
When performing an upgrade on Panorama to PAN-OS. what is the potential cause of a failed install?

A. Management only mode

B. Global Protect agent version

C. Expired certificates

D. Outdated plugins

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

To ensure that a Security policy has the highest priority, how should an administrator configure a Security policy in the device group hierarchy?

A. Add the policy in the shared device group as a pre-rule

B. Reference the targeted device's templates in the target device group.

C. Add the policy to the target device group and apply a master device to the device group.

D. Clone the security policy and add it to the other device groups.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제7

An engineer is monitoring an active/active high availability (HA) firewall pair.
Which HA firewall state describes the firewall that is experiencing a failure of a monitored path?

A. Initial

B. Passive

C. Active-secondary

D. Tentative

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

An engineer decides to use Panorama to upgrade devices to PAN-OS 10.2.
Which three platforms support PAN-OS 10.2? (Choose three.)

정답: A,D,E

설명: (DumpTOP 회원만 볼 수 있음)

문제9

A network security engineer needs to ensure that virtual systems can communicate with one another within a Palo Alto Networks firewall. Separate virtual routers (VRs) are created for each virtual system.
In addition to confirming security policies, which three configuration details should the engineer focus on to ensure communication between virtual systems? {Choose three.)

A. Add a route with next hop next-vr by using the VR configured in the virtual system.

B. Ensure the virtual systems are visible to one another.

C. External zones with the virtual systems added.

D. Add a route with next hop set to none, and use the interface of the virtual systems that need to communicate.

E. Layer 3 zones for the virtual systems that need to communicate.

정답: A,B,C

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Based on the screenshots above, and with no configuration inside the Template Stack itself, what access will the device permit on its Management port?

A. The firewall will allow HTTP, Telnet, HTTPS, SSH, and Ping from IP addresses defined as
$permitted-subnet-1 and $permitted-subnet-2.

B. The firewall will allow HTTP Telnet, HTTPS, SSH, and Ping from IP addresses defined as
$permitted-subnet-2.

C. The firewall will allow HTTP, Telnet, SNMP, HTTPS, SSH and Ping from IP addresses defined as
$permitted-subnet-1 and $permitted-subnet-2.

D. The firewall will allow HTTP Telnet, HTTPS, SSH, and Ping from IP addresses defined as
$permitted-subnet-1.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 PCNSE 무료덤프 - Palo Alto Networks Certified Network Security Engineer

우리와 연락하기

유용한 링크

최신 업데이트