PCNSE8 Online Practice Questions and Answers

When using the predefined default profile, the policy will inspect for viruses on the decoders. Match each decoder with its default action. Answer options may be used more than once or not at all.

Select and Place:

What should an administrator consider when planning to revert Panorama to a pre-PAN-OS 8.1 version?

A. Panorama cannot be reverted to an earlier PAN-OS release if variables are used in templates or template stacks.

B. An administrator must use the Expedition tool to adapt the configuration to the pre-PAN-OS 8.1 state.

C. When Panorama is reverted to an earlier PAN-OS release, variables used in templates or template stacks will be removed automatically.

D. Administrators need to manually update variable characters to those used in pre-PAN-OS 8.1.

Which Captive Portal mode must be configured to support MFA authentication?

A. NTLM

B. Redirect

C. Single Sign-On

D. Transparent

An administrator sees several inbound sessions identified as unknown-tcp in the Traffic logs. The administrator determines that these sessions are form external users accessing the company's proprietary accounting application. The

administrator wants to reliably identify this traffic as their accounting application and to scan this traffic for threats.

Which option would achieve this result?

A. Create a custom App-ID and enable scanning on the advanced tab.

B. Create an Application Override policy.

C. Create a custom App-ID and use the "ordered conditions" check box.

D. Create an Application Override policy and custom threat signature for the application.

Exhibit:

What will be the egress interface if the traffic's ingress interface is ethernet1/6 sourcing from 192.168.111.3 and to the destination 10.46.41.113 during the time shown in the image?

A. ethernet1/7

B. ethernet1/5

C. ethernet1/6

D. ethernet1/3

In High Availability, which information is transferred via the HA data link?

A. session information

B. heartbeats

C. HA state information

D. User-ID information

Which two features does PAN-OS?software use to identify applications? (Choose two)

A. port number

B. session number

C. transaction characteristics

D. application layer payload

A logging infrastructure may need to handle more than 10,000 logs per second. Which two options support a dedicated log collector function? (Choose two)

A. Panorama virtual appliance on ESX(i) only

B. M-500

C. M-100 with Panorama installed

D. M-100

A network engineer has revived a report of problems reaching 98.139.183.24 through vr1 on the firewall. The routing table on this firewall is extensive and complex. Which CLI command will help identify the issue?

A. test routing fib virtual-router vr1

B. show routing route type static destination 98.139.183.24

C. test routing fib-lookup ip 98.139.183.24 virtual-router vr1

D. show routing interface

The company's Panorama server (IP 10.10.10.5) is not able to manage a firewall that was recently deployed. The firewall's dedicated management port is being used to connect to the management network. Which two commands may be used to troubleshoot this issue from the CLI of the new firewall? (Choose two)

A. test panoramas-connect 10.10.10.5

B. show panoramas-status

C. show arp all I match 10.10.10.5

D. topdump filter "host 10.10.10.5

E. debug dataplane packet-diag set capture on

Only two Trust to Untrust allow rules have been created in the Security policy Rule1 allows google-base Rule2 allows youtube-base The youtube-base App-ID depends on google-base to function. The google-base App-ID implicitly uses SSL and web-browsing. When user try to accesss https://www.youtube.com in a web browser, they get an error indecating that the server cannot be found. Which action will allow youtube.com display in the browser correctly?

A. Add SSL App-ID to Rule1

B. Create an additional Trust to Untrust Rule, add the web-browsing, and SSL App-ID's to it

C. Add the DNS App-ID to Rule2

D. Add the Web-browsing App-ID to Rule2

A Network Administrator wants to deploy a Large Scale VPN solution. The Network Administrator has chosen a GlobalProtect Satellite solution. This configuration needs to be deployed to multiple remote offices and the Network Administrator

decides to use Panorama to deploy the configurations.

How should this be accomplished?

A. Create a Template with the appropriate IKE Gateway settings

B. Create a Template with the appropriate IPSec tunnel settings

C. Create a Device Group with the appropriate IKE Gateway settings

D. Create a Device Group with the appropriate IPSec tunnel settings

Which CLI command displays the current management plan memory utilization?

A. > show system info

B. > show system resources

C. > debug management-server show

D. > show running resource-monitor

Which two logs on the firewall will contain authentication-related information useful for troubleshooting purpose (Choose two)

A. ms.log

B. traffic.log

C. system.log

D. dp-monitor.log

E. authd.log

Which two actions are required to make Microsoft Active Directory users appear in a firewall traffic log? (Choose two.)

A. Run the User-ID Agent using an Active Directory account that has "event log viewer" permissions

B. Enable User-ID on the zone object for the destination zone

C. Run the User-ID Agent using an Active Directory account that has "domain administrator" permissions

D. Enable User-ID on the zone object for the source zone

E. Configure a RADIUS server profile to point to a domain controller