PCNSC Online Practice Questions and Answers

Which three user authentication services can be modified in to provide the Palo Alto Networks NGFW with both username and role names? (Choose three.)

A. PAP

B. SAML

C. LDAP

D. TACACS+

E. RADIUS

F. Kerberos

An administrator has been asked to configure active/active HA for a pair of Palo Alto Networks NGFWs. The firewalls use layer 3 interface to send traffic to a single gateway IP for the pair.

Which configuration will enable this HA scenario?

A. The firewall do not use floating IPs in active/active HA.

B. The two firewalls will share a single floating IP and will use gratuitous ARP to share the floating IP.

C. The firewalls will share the same interface IP address, and device 1 will use the floating IP if device 0 fails.

D. Each firewall will have a separate floating IP. and priority will determine which firewall has the primary IP.

Which feature prevents the submission of corporate login information into website forms?

A. credential submission prevention

B. file blocking

C. User-ID

D. data filtering

A Security policy rule is configured with a Vulnerability Protection Profile and an action of Deny".

Which action will this configuration cause on the matched traffic?

A. The configuration is invalid it will cause the firewall to Skip this Security policy rule A warning will be displayed during a command.

B. The configuration is valid It will cause the firewall to deny the matched sessions. Any configured Security Profiles have no effect if the Security policy rule action is set to "Deny".

C. The configuration will allow the matched session unless a vulnerability signature is detected. The "Deny" action will supersede the per. defined, severity defined actions defined in the associated Vulnerability Protection Profile.

D. The configuration is invalid. The Profile Settings section will be- grayed out when the action is set to "Deny".

A Palo Alto Networks NGFW just submitted a file lo WildFire tor analysis Assume a 5-minute window for analysis. The firewall is configured to check for verdicts every 5 minutes.

How quickly will the firewall receive back a verdict?

A. 10 to 15 minutes

B. 5 to 10 minutes

C. More than 15 minutes

D. 5 minutes

Which administrative authentication method supports authorization by an external service?

A. RADIUS

B. SSH keys

C. Certification

D. LDAP

What will be the egress interface if the traffic's ingress interface is Ethernet 1/6 sourcing form 192.168.11.3 and to the destination 10.46.41.113.during the.

A. ethernet 1/6

B. ethernet 1/5

C. ethernet 1/3

D. ethernet 1/7

How does Panorama prompt VMware NSX to quarantine an in6erface VM??

A. Syslog Server Profile

B. Email Server Profile

C. SNMP Server Profile

D. HTTP Server Profile

Which method will dynamically register tags on the Palo Alto Networks NGFW?

A. Restful API or the VMware API on the firewall or on the User.-D agent or the ready -only domain controller

B. XML API or the VMware API on the firewall on the User-ID agent or the CLI

C. Restful API or the VMware API on the firewall or on the User-ID Agent

D. XML- API or lite VM Monitoring agent on the NGFW or on the User- ID agent

An administrator accidentally closed the commit window/screen before the commit was finished. Which two options could the administrator use to verify the progress or success of that commit task? (Choose two.)

A. Option A

B. Option B

C. Option C

D. Option D