Palo Alto Networks PCNSE Quiz 22 Topic 13 Questions 106-110

Question: 1

An administrator needs to implement an NGFW between their DMZ and Core network. EIGRP Routing between the two environments is required. Which interface type would support this business requirement?

AVirtual Wire interfaces to permit EIGRP routing to remain between the Core and DMZ

BLayer 3 or Aggregate Ethernet interfaces, but configuring EIGRP on subinterfaces only

CTunnel interfaces to terminate EIGRP routing on an IPsec tunnel (with the GlobalProtect License to support LSVPN and EIGRPprotocols)

DLayer 3 interfaces, but configuring EIGRP on the attached virtual router

Show Answer

Question: 2

A speed/duplex negotiation mismatch is between the Palo Alto Networks management port and the switch port which it connects. How would an administrator configure the interface to 1Gbps?

Aset deviceconfig interface speed-duplex 1Gbps-full-duplex

Bset deviceconfig system speed-duplex 1Gbps-duplex

Cset deviceconfig system speed-duplex 1Gbps-full-duplex

Dset deviceconfig Interface speed-duplex 1Gbps-half-duplex

Show Answer

Question: 3

What are two benefits of nested device groups in Panorama? (Choose two.)

AReuse of the existing Security policy rules and objects

BRequires configuring both function and location for every device

CAll device groups inherit settings form the Shared group

DOverwrites local firewall configuration

Show Answer

Question: 4

Refer to the exhibit.

q4_PCNSE

An administrator cannot see any of the Traffic logs from the Palo Alto Networks NGFW on Panoram

a. The configuration problem seems to be on the firewall side. Where is the best place on the Palo Alto Networks NGFW to check whether the configuration is correct?

A)

q4_PCNSE

B)

q4_PCNSE

C)

q4_PCNSE

D)

q4_PCNSE

AOption A

BOption B

COption C

DOption D

Show Answer

Question: 5

What is the purpose of the firewall decryption broker?

ADecrypt SSL traffic a then send it as cleartext to a security chain of inspection tools

BForce decryption of previously unknown cipher suites

CInspection traffic within IPsec tunnel

DReduce SSL traffic to a weaker cipher before sending it to a security chain of inspection tools

Show Answer

Palo Alto Networks PCNSE Quiz:22 Topic:13 Questions:106-110