Palo Alto Networks PCNSE Quiz 42 Topic 4 Questions 206-210

Question: 1

Which two features does PAN-OS software use to identify applications? (Choose two)

Aport number

Bsession number

Ctransaction characteristics

Dapplication layer payload

Show Answer

Question: 2

Which log file can be used to identify SSL decryption failures?

AConfiguration

BThreats

CACC

DTraffic

Show Answer

Question: 3

An administrator needs to upgrade an NGFW to the most current version of PAN-OS software. The following is occurring:

*Firewall has Internet connectivity through e1/1.

*Default security rules and security rules allowing all SSL and web-browsing traffic to and from any zone.

*Service route is configured, sourcing update traffic from e1/1.

*A communication error appears in the System logs when updates are performed.

*Download does not complete.

What must be configured to enable the firewall to download the current version of PAN-OS software?

ADNS settings for the firewall to use for resolution

Bscheduler for timed downloads of PAN-OS software

Cstatic route pointing application PaloAlto-updates to the update servers

DSecurity policy rule allowing PaloAlto-updates as the application

Show Answer

Question: 4

An administrator wants a new Palo Alto Networks NGFW to obtain automatic application updates daily, so it is configured to use a scheduler for the application database. Unfortunately, they required the management network to be isolated so that it cannot reach the internet. Which configuration will enable the firewall to download and install application updates automatically?

AConfigure a Policy Based Forwarding policy rule for the update server IP address so that traffic sourced from themanagement interfaced destined for the update servers goes out of the interface acting as your internet connection.

BConfigure a security policy rule to allow all traffic to and from the update servers.

CDownload and install application updates cannot be done automatically if the MGT port cannot reach the internet.

DConfigure a service route for Palo Alto networks services that uses a dataplane interface that can route traffic to the internet, and create a security policy rule to allow the traffic from that interface to the update servers if necessary.

Show Answer

Question: 5

Which three firewall states are valid? (Choose three)

AActive

BFunctional

CPending

DPassive

ESuspended

Show Answer

Palo Alto Networks PCNSE Quiz:42 Topic:4 Questions:206-210