Palo Alto Networks PCNSE Quiz 51 Topic 14 Questions 251-255

Question: 1

A company has a pair of Palo Alto Networks firewalls configured as an Acitve/Passive High Availability (HA) pair.

What allows the firewall administrator to determine the last date a failover event occurred?

AFrom the CLI issue use the show System log

BApply the filter subtype eq ha to the System log

CApply the filter subtype eq ha to the configuration log

DCheck the status of the High Availability widget on the Dashboard of the GUI

Show Answer

Question: 2

Click the Exhibit button

q2_PCNSE

An administrator has noticed a large increase in bittorrent activity. The administrator wants to determine where the traffic is going on the company.

What would be the administrator's next step?

ARight-Click on the bittorrent link and select Value from the context menu

BCreate a global filter for bittorrent traffic and then view Traffic logs.

CCreate local filter for bittorrent traffic and then view Traffic logs.

DClick on the bittorrent application link to view network activity

Show Answer

Question: 3

How is the Forward Untrust Certificate used?

AIt issues certificates encountered on the Untrust security zone when clients attempt to connect to a site that has be decrypted/

BIt is used when web servers request a client certificate.

CIt is presented to clients when the server they are connecting to is signed by a certificate authority that is not trusted by firewall.

DIt is used for Captive Portal to identify unknown users.

Show Answer

Question: 4

Which command can be used to validate a Captive Portal policy?

Aeval captive-portal policy <criteria>

Brequest cp-policy-eval <criteria>

Ctest cp-policy-match <criteria>

Ddebug cp-policy <criteria>

Show Answer

Question: 5

What are three valid actions in a File Blocking Profile? (Choose three)

AForward

BBlock

CAlret

DUpload

EReset-both

FContinue

Show Answer

Palo Alto Networks PCNSE Quiz:51 Topic:14 Questions:251-255