How to Easily Pass the Paloalto Networks PCNSC Exam: Expert Advice

Questions 11

Which event will happen administrator uses an Application Override Policy?

Options:

Theapplication name assigned to the traffic by the security rule is written to the traffic log. B. The Palo Alto Networks NGFW Steps App-ID processing at Layer 4.

Threat-ID processing time is decreased.

App-ID processing time is increased.

Buy Now

Questions 12

An administrator creates a custom application containing Layer 7 signatures. The latest application and threat dynamic update is downloaded to the same NGFW. THE update contains application that matches the same traffic signatures as the customer application.

Which application should be used to identify traffic traversing the NGFW?

Options:

custom application

Custom and downloaded application signature files are merged and are used

System longs show an application errors and signature is used.

downloaded application

Buy Now

Questions 13

An administrator pushes a new configuration from panorama to a pair of firewalls that are configured as active/passive HA pair.

Which NGFW receives the configuration from panorama?

Options:

the active firewall, which then synchronizes to the passive firewall

the passive firewall, which then synchronizes to the active firewall

both the active and passive firewalls independently, with no synchronization afterward

both the active and passive firewalls, which then synchronizes with each other

Buy Now

Questions 14

Which prerequisite must be satisfied before creating an SSH proxy Decryption policy?

Options:

No prerequisites are required

SSH keys must be manually generated

Both SSH keys and SSL certificates must be generated

SSL certificates must be generated

Buy Now

Questions 15

Which two benefits comefrom assigning a Decrypting Profile to a Decryption rule with a” NO Decrypt” action? (Choose two.)

Options:

Block sessions with unsuspected cipher suites

Block sessions with untrusted issuers

Block credential phishing.

Block sessions with clientauthentication

Block sessions with expired certificates

Buy Now

Questions 16

Refer to the exhibit.

PCNSC Question 16

A web server in the DMZ is being mapped to a public address through DNAT.

Which Security policy rule will allow traffic to flow to the web server?

Options:

Untrust (any) to Untrust (10. 1.1. 100), web browsing – Allow

Untrust (any) to Untrust (1. 1. 1. 100), web browsing – Allow

Untrust (any) to DMZ (1. 1. 1. 100), web browsing – Allow

Untrust (any) to DMZ (10. 1. 1. 100), web browsing – Allow

Buy Now

Questions 17

A session in the Traffic log is reporting the application as "incomplete”

What does "incomplete" mean?

Options:

The three-way TCP handshake did notcomplete.

Data was received but wan instantly discarded because of a Deny policy was applied before App ID could be applied.

The three-way TCP handshake was observed, but the application could not be identified.

The traffic is coming across UDP, and the application could not be identified.

Buy Now

Questions 18

An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.

Which configuration will enable this HA scenario?

Options:

The firewall do not use floating IPs in active/active HA.

The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.

The firewalls will share the sameinterface IP address, and device 1 will use the floating IP if device 0 fails.

Each firewall will have a separate floating IP. and priority will determine which firewall has the primary IP.

Buy Now

Questions 19

An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.)

PCNSC Question 19