Palo Alto Networks PCNSE Quiz 54 Topic 10 Questions 266-270

Question: 1

A network Administrator needs to view the default action for a specific spyware signature. The administrator follows the tabs and menus through Objects> Security Profiles> Anti-Spyware and select default profile.

What should be done next?

AClick the simple-critical rule and then click the Action drop-down list.

BClick the Exceptions tab and then click show all signatures.

CView the default actions displayed in the Action column.

DClick the Rules tab and then look for rules with 'default' in the Action column.

Show Answer

Question: 2

Which two statements are correct for the out-of-box configuration for Palo Alto Networks NGFWs? (Choose two)

AThe devices are pre-configured with a virtual wire pair out the first two interfaces.

BThe devices are licensed and ready for deployment.

CThe management interface has an IP address of 192.168.1.1 and allows SSH and HTTPS connections.

DA default bidirectional rule is configured that allows Untrust zone traffic to go to the Trust zone.

EThe interface are pingable.

Show Answer

Question: 3

Which two mechanisms help prevent a spilt brain scenario an Active/Passive High Availability (HA) pair? (Choose two)

AConfigure the management interface as HA3 Backup

BConfigure Ethernet 1/1 as HA1 Backup

CConfigure Ethernet 1/1 as HA2 Backup

DConfigure the management interface as HA2 Backup

EConfigure the management interface as HA1 Backup

FConfigure ethernet1/1 as HA3 Backup

Show Answer

Question: 4

Which two options are required on an M-100 appliance to configure it as a Log Collector? (Choose two)

AFrom the Panorama tab of the Panorama GUI select Log Collector mode and then commit changes

BEnter the command request system system-mode logger then enter Y to confirm the change to Log Collector mode.

CFrom the Device tab of the Panorama GUI select Log Collector mode and then commit changes.

DEnter the command logger-mode enable the enter Y to confirm the change to Log Collector mode.

ELog in the Panorama CLI of the dedicated Log Collector

Show Answer

Question: 5

The web server is configured to listen for HTTP traffic on port 8080. The clients access the web server using the IP address 1.1.1.100 on TCP Port 80. The destination NAT rule is configured to translate both IP address and report to 10.1.1.100 on TCP Port 8080.

q5_PCNSE

Which NAT and security rules must be configured on the firewall? (Choose two)

AA security policy with a source of any from untrust-I3 Zone to a destination of 10.1.1.100 in dmz-I3 zone using web-browsing application

BA NAT rule with a source of any from untrust-I3 zone to a destination of 10.1.1.100 in dmz-zone using service-http service.

CA NAT rule with a source of any from untrust-I3 zone to a destination of 1.1.1.100 in untrust-I3 zone using service-http service.

DA security policy with a source of any from untrust-I3 zone to a destination of 1.1.100 in dmz-I3 zone using web-browsing application.

Show Answer

Palo Alto Networks PCNSE Quiz:54 Topic:10 Questions:266-270