Updated PCNSE Dumps V16.02 – Valid For Passing PCNSE Exam With 100% Guarantee

1. An administrator wants to enable WildFire inline machine learning.

Which three file types does WildFire inline ML analyze? (Choose three.)

2. A firewall has been assigned to a new template stack that contains both "Global" and "Local" templates in Panorama, and a successful commit and push has been performed. While validating the configuration on the local firewall, the engineer discovers that some settings are not being applied as intended.

The setting values from the "Global" template are applied to the firewall instead of the "Local" template that has different values for the same settings.

What should be done to ensure that the settings in the "Local" template are applied while maintaining settings from both templates?

3. A firewall is configured with SSL Forward Proxy decryption and has the following four enterprise certificate authorities (CAs):

i. Enterprise-Trusted-CA, which is verified as Forward Trust Certificate (The CA is also installed in the trusted store of the end-user browser and system.)

ii. Enterprise-Untrusted-CA, which is verified as Forward Untrust Certificate

iii. Enterprise-Intermediate-CA

iv. Enterprise-Root-CA, which is verified only as Trusted Root CA

An end-user visits https://www.example-website.com/ with a server certificate Common Name (CN): www.example-website.com.The firewall does the SSL Forward Proxy decryption for the website and the server certificate is not trusted by the firewall.

The end-user's browser will show that the certificate for www.example-website.comwas issued by which of the following?

4. When you navigate to Network>Global Protect>Portals>Agent>(config)>App and look in the Connect Method section, which three options are available? (Choose three.)

5. An existing NGFW customer requires direct internet access offload locally at each site, and IPSec connectivity to all branches over public internet. One requirement is that no new SD-WAN hardware be introduced to the environment.

What is the best solution for the customer?

6. A user at an external system with the IP address 65. 124.57.5 queries the DNS server at 4.2.2.2 for the IP address of the web server, www.xyz.com. The DNS server returns an address of 172.16.15.1

In order to reach the web server, which Security rule and NAT rule must be configured on the firewall?

7. Given the following snippet of a WildFire submission log, did the end-user get access to the requested information and why or why not?

8. A remote administrator needs firewall access on an untrusted interface.

Which two components are required on the firewall to configure certificate-based administrator authentication to the web Ul? (Choose two)

9. A bootstrap USB flash drive has been prepared using a Windows workstation to load the initial configuration of a Palo Alto Networks firewall that was previously being used in a lab. The USB flash drive was formatted using file system FAT32 and the initial configuration is stored in a file named init-cfg txt. The firewall is currently running PAN-OS 10.0 and using a lab config.

The contents of init-cfg.txi in the USB flash drive are as follows:

The USB flash drive has been inserted in the firewalls' USB port, and the firewall has been restarted using command:> request resort system

Upon restart, the firewall fails to begin the bootstrapping process.

The failure is caused because:

10. When an in-band data port is set up to provide access to required services, what is required for an interface that is assigned to service routes?

11. An administrator cannot see any Traffic logs from the Palo Alto Networks NGFW in Panorama reports. The configuration problem seems to be on the firewall.

Which settings, if configured incorrectly, most likely would stop only Traffic logs from being sent from the NGFW to Panorama?

A)

B)

C)

D)

12. Your company has 10 Active Directory domain controllers spread across multiple WAN links. All users authenticate to Active Directory. Each link has substantial network bandwidth to support all mission-critical applications. The firewall's management plane is highly utilized.

Given this scenario, which type of User-ID agent is considered a best practice by Palo Alto Networks?

13. Refer to the image.

An administrator is tasked with correcting an NTP service configuration for firewalls that cannot use the Global template NTP servers. The administrator needs to change the IP address to a preferable server for this template stack but cannot impact other template stacks.

How can the issue be corrected?

14. A Panorama administrator configures a new zone and uses the zone in a new Security policy.

After the administrator commits the configuration to Panorama, which device-group commit push operation should the administrator use to ensure that the push is successful?

15. Which component enables you to configure firewall resource protection settings?

16. Which statement is true regarding a Best Practice Assessment?

17. What would allow a network security administrator to authenticate and identify a user with a new BYOD-type device that is not joined to the corporate domain?

18. Which configuration task is best for reducing load on the management plane?

19. SAML SLO is supported for which two firewall features? (Choose two.)

20. You need to allow users to access the office-suite applications of their choice.

How should you configure the firewall to allow access to any office-suite application?

21. Which statement is correct given the following message from the PanGPA.log on the GlobalProtect app?

Failed to connect to server at port: 4767

22. A network administrator plans a Prisma Access deployment with three service connections, each with a BGP peering to a CPE. The administrator needs to minimize the BGP configuration and management overhead on on-prem network devices.

What should the administrator implement?

23. A firewall administrator is trying to identify active routes learned via BGP in the virtual router runtime stats within the GUI.

Where can they find this information?

24. In the screenshot above, which two pieces of information can be determined from the ACC configuration shown? (Choose two.)

25. What type of address object would be useful for internal devices where the addressing structure assigns meaning to certain bits in the address, as illustrated in the diagram?

26. An engineer is troubleshooting traffic routing through the virtual router. The firewall uses multiple routing protocols, and the engineer is trying to determine routing priority.

Match the default Administrative Distances for each routing protocol.

27. What are three important considerations during SD-WAN configuration planning? (Choose three.)

28. Which statement regarding HA timer settings is true?

29. PBF can address which two scenarios? (Choose two.)

30. What is the best description of the HA4 Keep-alive Threshold (ms)?