Palo Alto Networks PCNSE Quiz 50 Topic 5 Questions 246-250

Question: 1

What file type upload is supported as part of the basic WildFire service?

APE

BBAT

CVBS

DELF

Show Answer

Question: 2

On the NGFW. how can you generate and block a private key from export and thus harden your security posture and prevent rogue administrators or other bad actors from misusing keys?

A1.Select Device > Certificate Management > Certificates >Devace > Certificates
2. Import the certificate.
3 Select Import Private Key
4 Click Generate to generate the new certificate

B1 Select Device > Certificates
2 Select Certificate Profile
3 Generate the certificate
4 Select Block Private Key Export.

C1 Select Device > Certificates
2 Select Certificate Profile.
3 Generate the certificate
4 Select Block Private Key Export

D1 Select Device > Certificate Management > Certificates > Device > Certificates
2 Generate the certificate
3 Select Block Private Key Export
4 Click Genet ale to generate the new certificate.

Show Answer

Question: 3

To more easily reuse templates and template slacks , you can create term plate variables in place of firewall-specific and appliance-specific IP literals in your configurations

Which one is the correct configuration?

A@Panorama

B#Pancrama

C&Panorama

D$Panorama

Show Answer

Question: 4

A host attached to Ethernet 1/4 cannot ping the default gateway. The widget on the dashboard shows Ethernet 1/1 and Ethernet 1/4 to be green. The IP address of Ethernet 1/1 is 192.168.1.7 and the IP address of Ethernet 1/4 is 10.1.1.7. The default gateway is attached to Ethernet 1/1. A default route is properly configured.

What can be the cause of this problem?

ANo Zone has been configured on Ethernet 1/4.

BInterface Ethernet 1/1 is in Virtual Wire Mode.

CDNS has not been properly configured on the firewall.

DDNS has not been properly configured on the host.

Show Answer

Question: 5

Site-A and Site-B have a site-to-site VPN set up between them. OSPF is configured to dynamically create the routes between the sites. The OSPF configuration in Site-A is configured properly, but the route for the tunner is not being established. The Site-B interfaces in the graphic are using a broadcast Link Type. The administrator has determined that the OSPF configuration in Site-B is using the wrong Link Type for one of its interfaces.

q5_PCNSE

Which Link Type setting will correct the error?

ASet tunnel. 1 to p2p

BSet tunnel. 1 to p2mp

CSet Ethernet 1/1 to p2mp

DSet Ethernet 1/1 to p2p

Show Answer

Palo Alto Networks PCNSE Quiz:50 Topic:5 Questions:246-250