Palo Alto Networks PCNSE Quiz 49 Topic 6 Questions 241-245

Question: 1

Given the following table.

q1_PCNSE

Which configuration change on the firewall would cause it to use 10.66.24.88 as the next hop for the 192.168.93.0/30 network?

AConfiguring the administrative Distance for RIP to be lower than that of OSPF Int.

BConfiguring the metric for RIP to be higher than that of OSPF Int.

CConfiguring the administrative Distance for RIP to be higher than that of OSPF Ext.

DConfiguring the metric for RIP to be lower than that OSPF Ext.

Show Answer

Question: 2

A VPN connection is set up between Site-A and Site-B, but no traffic is passing in the system log of Site-A, there is an event logged as like-nego-p1-fail-psk.

What action will bring the VPN up and allow traffic to start passing between the sites?

AChange the Site-B IKE Gateway profile version to match Site-A,

BChange the Site-A IKE Gateway profile exchange mode to aggressive mode.

CEnable NAT Traversal on the Site-A IKE Gateway profile.

DChange the pre-shared key of Site-B to match the pre-shared key of Site-A

Show Answer

Question: 3

A company is upgrading its existing Palo Alto Networks firewall from version 7.0.1 to 7.0.4.

Which three methods can the firewall administrator use to install PAN-OS 8.0.4 across the enterprise?( Choose three)

ADownload PAN-OS 8.0.4 files from the support site and install them on each firewall after manually uploading.

BDownload PAN-OS 8.0.4 to a USB drive and the firewall will automatically update after the USB drive is inserted in the firewall.

CPush the PAN-OS 8.0.4 updates from the support site to install on each firewall.

DPush the PAN-OS 8.0.4 update from one firewall to all of the other remaining after updating one firewall.

EDownload and install PAN-OS 8.0.4 directly on each firewall.

FDownload and push PAN-OS 8.0.4 from Panorama to each firewall.

Show Answer

Question: 4

A logging infrastructure may need to handle more than 10,000 logs per second.

Which two options support a dedicated log collector function? (Choose two)

APanorama virtual appliance on ESX(i) only

BM-500

CM-100 with Panorama installed

DM-100

Show Answer

Question: 5

Which three fields can be included in a pcap filter? (Choose three)

AEgress interface

BSource IP

CRule number

DDestination IP

EIngress interface

Show Answer

Palo Alto Networks PCNSE Quiz:49 Topic:6 Questions:241-245