Palo Alto Networks PCNSE Quiz 21 Topic 13 Questions 101-105

Question: 1

Which three split tunnel methods are supported by a globalProtect gateway? (Choose three.)

Avideo streaming application

BClient Application Process

CDestination Domain

DSource Domain

EDestination user/group

FURL Category

Show Answer

Question: 2

Based on the image, what caused the commit warning?

q2_PCNSE

AThe CA certificate for FWDtrust has not been imported into the firewall.

BThe FWDtrust certificate has not been flagged as Trusted Root CA.

CSSL Forward Proxy requires a public certificate to be imported into the firewall.

DThe FWDtrust certificate does not have a certificate chain.

Show Answer

Question: 3

An administrator is defining protection settings on the Palo Alto Networks NGFW to guard against resource exhaustion. When platform utilization is considered, which steps must the administrator take to configure and apply packet buffer protection?

AEnable and configure the Packet Buffer protection thresholds.Enable Packet Buffer Protection per ingress zone.

BEnable and then configure Packet Buffer thresholdsEnable Interface Buffer protection.

CCreate and Apply Zone Protection Profiles in all ingress zones.Enable Packet Buffer Protection per ingress zone.

DConfigure and apply Zone Protection Profiles for all egress zones.Enable Packet Buffer Protection pre egress zone.

EEnable per-vsys Session Threshold alerts and triggers for Packet Buffer Limits.Enable Zone Buffer Protection per zone.

Show Answer

Question: 4

What are the two behavior differences between Highlight Unused Rules and the Rule Usage Hit counter when a firewall is rebooted? (Choose two.)

ARule Usage Hit counter will not be reset

BHighlight Unused Rules will highlight all rules.

CHighlight Unused Rules will highlight zero rules.

DRule Usage Hit counter will reset.

Show Answer

Question: 5

The firewall is not downloading IP addresses from MineMeld. Based, on the image, what most likely is wrong?

q5_PCNSE

AA Certificate Profile that contains the client certificate needs to be selected.

BThe source address supports only files hosted with an ftp://

.

CExternal Dynamic Lists do not support SSL connections.

DA Certificate Profile that contains the CA certificate needs to be selected.

Show Answer

Palo Alto Networks PCNSE Quiz:21 Topic:13 Questions:101-105