Palo Alto Networks PCNSE Quiz 3 Topic 10 Questions 11-15

Question: 1

To support a new compliance requirement, your company requires positive username attribution of every IP address used by wireless devices You must collect IP address-to-username mappings as soon as possible with minimal downtime and minimal configuration changes to the wireless devices themselves The wireless devices are from various manufacturers

Given the scenario, choose the option for sending IP address-to-username mappings to the firewall

AUID redistribution

BRADIUS

Csyslog listener

DXFF headers

Show Answer

Question: 2

A customer is replacing their legacy remote access VPN solution The current solution is in place to secure internet egress and provide access to resources located in the main datacenter for the connected clients.

Prisma Access has been selected to replace the current remote access VPN solution. During onboarding the following options and licenses were selected and enabled

q2_PCNSE

What must be configured on Prisma Access to provide connectivity to the resources in the datacenter?

AConfigure a mobile user gateway in the region closest to the datacenter to enable connectivity to the datacenter

BConfigure a remote network to provide connectivity to the datacenter

CConfigure Dynamic Routing to provide connectivity to the datacenter

DConfigure a service connection to provide connectivity to the datacenter

Show Answer

Question: 3

A customer is replacing its legacy remote-access VPN solution Prisma Access has been selected as the replacement During onboarding, the following options and licenses were selected and enabled:

q3_PCNSE

The customer wants to forward to a Splunk SIEM the logs that are generated by users that are connected to Prisma Access for Mobile Users

Which two settings must the customer configure? (Choose two)

AConfigure a log forwarding profile and select the Panorama/Cortex Data Lake checkbox Apply the Log Forwarding profile to all of the security policy rules in Mobile_User_Device_Group

BConfigure Cortex Data Lake log forwarding and add the Splunk syslog server

CConfigure a Log Forwarding profile, select the syslog checkbox and add the Splunk syslog server Apply the Log Forwarding profile to all of the security policy rules in the Mobiie_User_Device_Group

DConfigure Panorama Collector group device log forwarding to send logs to the Splunk syslog server

Show Answer

Question: 4

An engineer is creating a security policy based on Dynamic User Groups (DUG) What benefit does this provide?

AAutomatically include users as members without having to manually create and commit policy or group changes

BDUGs are used to only allow administrators access to the management interface on the Palo Alto Networks firewall

CIt enables the functionality to decrypt traffic and scan for malicious behaviour for User-ID based policies

DSchedule commits at a regular intervals to update the DUG with new users matching the tags specified

Show Answer

Question: 5

Which two statements are true for the DNS Security service? (Choose two.)

AIt eliminates the need for dynamic DNS updates

BIt functions like PAN-DB and requires activation through the app portal

CIt removes the 100K limit for DNS entries for the downloaded DNS updates

DIt is automatically enabled and configured

Show Answer

Palo Alto Networks PCNSE Quiz:3 Topic:10 Questions:11-15