Palo Alto Networks PCNSE Quiz 15 Topic 8 Questions 71-75

Question: 1

Which protocol is supported by GlobalProtect Clientless VPN?

AHTTPS

BFTP

CRDP

DSSH

Show Answer

Question: 2

What happens to traffic traversing SD-WAN fabric that doesn't match any SD-WAN policies?

ATraffic is dropped because there is no matching SD-WAN policy to direct traffic.

BTraffic matches a catch-all policy that is created through the SD-WAN plugin.

CTraffic matches implied policy rules and is redistributed round robin across SD-WAN links.

DTraffic is forwarded to the first physical interface participating in SD-WAN based on lowest interface number (i.e., Eth1/1 over Eth1/3).

Show Answer

Question: 3

An administrator has purchased WildFire subscriptions for 90 firewalls globally.

What should the administrator consider with regards to the WildFire infrastructure?

ATo comply with data privacy regulations, WildFire signatures and verdicts are not shared globally.

BPalo Alto Networks owns and maintains one global cloud and four WildFire regional clouds.

CEach WildFire cloud analyzes samples and generates malware signatures and verdicts independently of the other WildFire clouds.

DThe WildFire Global Cloud only provides bare metal analysis.

Show Answer

Question: 4

A company wants to use their Active Directory groups to simplify their Security policy creation from Panorama.

Which configuration is necessary to retrieve groups from Panorama?

AConfigure an LDAP Server profile and enable the User-ID service on the management interface.

BConfigure a group mapping profile to retrieve the groups in the target template.

CConfigure a Data Redistribution Agent to receive IP User Mappings from User-ID agents.

DConfigure a master device within the device groups.

Show Answer

Question: 5

A traffic log might list an application as 'not-applicable' for which two reasons'? (Choose two )

AThe firewall did not install the session

BThe TCP connection terminated without identifying any application data

CThe firewall dropped a TCP SYN packet

DThere was not enough application data after the TCP connection was established

Show Answer

Palo Alto Networks PCNSE Quiz:15 Topic:8 Questions:71-75