Free Paloalto Networks PCNSE Practice Exam with Questions & Answers | Set: 2

The firewall denied the traffic before the application match could be performed.

The TCP connection terminated without identifying any application data

There was not enough application data after the TCP connection was established

The application is not a known Palo Alto Networks App-ID.

Perform a device-group commit push from Panorama using the "Include Device and Network Templates" option

Perform a template commit push from Panorama using the "Force Template Values" option

Perform a commit force from the CLI of the firewall

Reload the running configuration and perform a firewall local commit

Source translation with Dynamic IP and Port

Destination translation with Static IP

Source translation with Static IP

Destination translation with Dynamic IP

The active firewall which then synchronizes to the passive firewall

The passive firewall, which then synchronizes to the active firewall

Both the active and passive firewalls which then synchronize with each other

Both the active and passive firewalls independently, with no synchronization afterward

Move the policy with action decrypt to the top of the decryption policy rulebase.

Temporarily disable SSL decryption for all websites to troubleshoot the issue.

Create a policy-based “No Decrypt” rule in the decryption policy to exclude specific traffic from decryption.

Investigate decryption logs of the specific traffic to determine reasons for failure.

Disable SSL handshake logging.

GlobalProtect app and GiobalProtect satellite

GlobalRrotect app and GlobalProtect gateway

GlobalProtect portal and GlobalProtect gateway

GlobalProtect app and GlobalProtect portal

In the URL filtering profile, use the drop-down list to enable user credential detection.

Enable Device-ID in the zone.

Select the action for Site Access for each category.

Add the URL filtering profile to one or more Security policy rules.

Set phishing category to block in the URL Filtering profile.

Management plane CPU

Dataplane CPU

Packet buffers

On-chip packet descriptors

Add the policy to the target device group and apply a master device to the device group.

Reference the targeted device's templates in the target device group.

Clone the security policy and add it to the other device groups.

Add the policy in the shared device group as a pre-rule

To allow traffic between zones in different virtual systems without the traffic leaving the appliance

To allow traffic between zones in different virtual systems while the traffic is leaving the appliance

External zones are required because the same external zone can be used on different virtual systems

Multiple external zones are required in each virtual system to allow the communications between virtual systems