Palo Alto Networks PCNSE Quiz 2 Topic 1 Questions 6-10

Question: 1

Which two statements are true about DoS Protection and Zone Protection Profiles? (Choose two).

AZone Protection Profiles protect ingress zones

BZone Protection Profiles protect egress zones

CDoS Protection Profiles are packet-based, not signature-based

DDoS Protection Profiles are linked to Security policy rules

Show Answer

Question: 2

What are three types of Decryption Policy rules? (Choose three.)

ASSL Inbound Inspection

BSSH Proxy

CSSL Forward Proxy

DDecryption Broker

EDecryption Mirror

Show Answer

Question: 3

A network administrator configured a site-to-site VPN tunnel where the peer device will act as initiator None of the peer addresses are known What can the administrator configure to establish the VPN connection1?

ASet up certificate authentication

BEnable Passive Mode

CUse the Dynamic IP address type

DConfigure the peer address as an FQDN

Show Answer

Question: 4

A firewall administrator requires an A/P HA pair to fail over more quickly due to critical business application uptime requirements.

What is the correct setting?

AChange the HA timer profile to 'user-defined' and manually set the timers.

BChange the HA timer profile to 'fast'.

CChange the HA timer profile to 'aggressive' or customize the settings in advanced profile.

DChange the HA timer profile to 'quick' and customize in advanced profile.

Show Answer

Question: 5

A Panorama administrator configures a new zone and uses the zone in a new Security policy.

After the administrator commits the configuration to Panorama, which device-group commit push operation should the administrator use to ensure that the push is successful?

Aforce template values

Bmerge with candidate config

Cspecify the template as a reference template

Dinclude device and network templates

Show Answer

Palo Alto Networks PCNSE Quiz:2 Topic:1 Questions:6-10