Palo Alto Networks PCNSE Exam Questions & Answers

An internal system is not functioning. The firewall administrator has determined that the incorrect egress interface is being used. After looking at the configuration, the administrator believes that the firewall is not using a static route. What are two reasons why the firewall might not use a static route? (Choose two.)

A. no install on the route

B. duplicate static route

C. path monitoring on the static route

D. disabling of the static route

Refer to the exhibit.

Based on the screenshots above what is the correct order in which the various rules are deployed to firewalls inside the DATACENTER_DG device group?

A. shared pre-rules DATACENTER DG pre rules rules configured locally on the firewall shared post-rules DATACENTER_DG post-rules DATACENTER.DG default rules

B. shared pre-rules DATACENTER_DG pre-rules rules configured locally on the firewall shared post-rules DATACENTER.DG post-rules shared default rules

C. shared pre-rules DATACENTER_DG pre-rules rules configured locally on the firewall DATACENTER_DG post-rules shared post-rules shared default rules

D. shared pre-rules DATACENTER_DG pre-rules rules configured locally on the firewall DATACENTER_DG post-rules shared post-rules DATACENTER_DG default rules

After some firewall configuration changes, an administrator discovers that application identification has started failing. The administrator investigates further and notices that a high number of sessions were going to a discard state with the

application showing as unknown-tcp.

Which possible firewall change could have caused this issue?

A. enabling Forward segments that exceed the TCP App-ID inspection queue in Device > Setup > Content-ID > Content-ID Settings

B. enabling Forward segments that exceed the TCP content inspection queue in Device > Setup > Content-ID > Content-ID Settings

C. Jumbo frames were enabled on the firewall, which reduced the App-ID queue size and the number of available packet buffers.

D. Jumbo frames were disabled on the firewall, which reduced the queue sizes dedicated for out-of-order and application identification.