No Installation Required, Instantly Prepare for the PCNSE exam and please click the below link to start the PCNSE Exam Simulator with a real PCNSE practice exam questions.
Use directly our on-line PCNSE exam dumps materials and try our Testing Engine to pass the PCNSE which is always updated.
- (Exam Topic 2)
Which logs enable a firewall administrator to determine whether a session was decrypted?
Correct Answer:B
- (Exam Topic 1)
Given the following snippet of a WildFire submission log. did the end-user get access to the requested information and why or why not?
Correct Answer:B
- (Exam Topic 2)
A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.
How can the Palo Alto Networks NGFW be configured to specifically protect this server against resource exhaustion originating from multiple IP addresses (DDoS attack)?
Correct Answer:D
Reference: https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/policy/dos-protection-profiles
- (Exam Topic 3)
A company has a web server behind a Palo Alto Networks next-generation firewall that it wants to make accessible to the public at 1.1.1.1. The company has decided to configure a destination NAT Policy rule.
Given the following zone information:
•DMZ zone: DMZ-L3
•Public zone: Untrust-L3
•Guest zone: Guest-L3
•Web server zone: Trust-L3
•Public IP address (Untrust-L3): 1.1.1.1
•Private IP address (Trust-L3): 192.168.1.50
What should be configured as the destination zone on the Original Packet tab of NAT Policy rule?
Correct Answer:A
- (Exam Topic 3)
Support for which authentication method was added in PAN-OS 8.0?
Correct Answer:D
https://www.paloaltonetworks.com/resources/datasheets/whats-new-in-pan-os-7-1