New Year Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free Paloalto Networks PCNSC Practice Exam with Questions & Answers

Questions 1

Refer to the exhibit.

PCNSC Question 1

An administrator cannot see any of theTraffic logs from the Palo Alto Networks NGFW on Panorama. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?

A)

PCNSC Question 1

B)

PCNSC Question 1

C)

PCNSC Question 1

D)

PCNSC Question 1

Options:
A.

Option A

B.

Option B

C.

Option C

D.

Option D

Questions 2

An administrator has left a firewall to used default port for all management services. Which three function performed by the dataplane? (Choose three.)

Options:
A.

NTP

B.

antivirus

C.

NAT

D.

WildFire updates

E.

file blocking

Questions 3

A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch it connect.

How would an administrator configure the interface to IGbps?

Options:
A.

set deviceconfig system speed-duplex 10Gbps-full-duplex

B.

set deviceconfig interface speed-duplex 1Gbs--full-duplex

C.

set deviceconfig interface speed-duplex 1Gbs--half-duplex

D.

set deviceconfig system speed-duplex 1Gbs--half-duplex.

Questions 4

What will be the egress interface if the traffic’s ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.

PCNSC Question 4

Options:
A.

ethernet 1/6

B.

ethernet 1/5

C.

ethernet 1/3

D.

ethernet 1/7

Questions 5

Which virtual router feature determines if a specific destination IP address is reachable'?

Options:
A.

Ping-Path

B.

Path Monitoring

C.

Failover

D.

Heartbeat Monitoring

Questions 6

An administrator has users accessing network resources through Citrix XenApp 7 .x. Which User-ID mapping solution will map multiple mat who using Citrix to connect to the network and access resources?

Options:
A.

Client Probing

B.

Globa1Protect

C.

Terminal Services agent

D.

Syslog Monitoring

Questions 7

Which three authentication faction factors does PAN-OS® software support for MFA? (Choose three.)

Options:
A.

Voice

B.

Pull

C.

SMS

D.

Push

E.

Okta Adaptive

Questions 8

A client has a sensitive application server in their data center and is particularly concerned about resource exhaustion because of distributed denial-of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect tins server against resource exhaustion originating from multiple IP address (DDoS attack)?

Options:
A.

Define a custom App-ID to ensure that only legitimate application traffic reaches the server

B.

Add a DoS Protection Profile with defined session count.

C.

Add a Vulnerability Protection Profile to block the attack.

D.

Add QoS Profiles to throttle incoming requests.

Questions 9

Which three options are supposed in HA Lite? (Choose three.)

Options:
A.

Configuration synchronization

B.

Virtual link

C.

active/passive deployment

D.

session synchronization

E.

synchronization of IPsec security associations

Questions 10

An administrator has enabled OSPF on a virtual router on the NGFW OSPF is not adding new routes to the virtual router.

Which two options enable the administrator top troubleshoot this issue? (Choose two.)

Options:
A.

Perform atraffic pcap at the routing stage.

B.

View System logs.

C.

Add a redistribution profile to forward as BGP updates.

D.

View Runtime Status virtual router.

Exam Code: PCNSC
Certification Provider: Paloalto Networks
Exam Name: Palo Alto Networks Certified Network Security Consultant
Last Update: Mar 28, 2025
Questions: 60