Palo Alto Networks PCNSE Quiz 48 Topic 9 Questions 236-240

Question: 1

When backing up and saving configuration files, what is achieved using only the firewall and is not available in Panorama?

ALoad named configuration snapshot

BLoad configuration version

CSave candidate config

DExport device state

Show Answer

Question: 2

In which two types of deployment is active/active HA configuration supported? (Choose two.)

ATAP mode

BLayer 2 mode

CVirtual Wire mode

DLayer 3 mode

Show Answer

Question: 3

A client has a sensitive application server in their data center and is particularly concerned about session flooding because of denial of-service attacks.

How can the Palo Alto Networks NGFW be configured to specifically protect this server against session floods originating from a single IP address?

ADefine a custom App-ID to ensure that only legitimate application traffic reaches the server

BAdd QoS Profiles to throttle incoming requests

CAdd a tuned DoS Protection Profile

DAdd an Anti-Spyware Profile to block attacking IP address

Show Answer

Question: 4

A company hosts a publically accessible web server behind a Palo Alto Networks next generation firewall with the following configuration information.

Users outside the company are in the 'Untrust-L3' zone

The web server physically resides in the 'Trust-L3' zone.

Web server public IP address: 23.54.6.10

Web server private IP address: 192.168.1.10

Which two items must be NAT policy contain to allow users in the untrust-L3 zone to access the web server? (Choose two)

AUntrust-L3 for both Source and Destination zone

BDestination IP of 192.168.1.10

CUntrust-L3 for Source Zone and Trust-L3 for Destination Zone

DDestination IP of 23.54.6.10

Show Answer

Question: 5

Which option describes the operation of the automatic commit recovery feature?

AIt enables a firewall to revert to the previous configuration if rule shadowing is detected

BIt enables a firewall to revert to the previous configuration if a commit causes Panorama connectivity failure.

CIt enables a firewall to revert to the previous configuration if application dependency errors are found

DIt enables a firewall to revert to the previous configuration if a commit causes HA partner connectivity failure

Show Answer

Palo Alto Networks PCNSE Quiz:48 Topic:9 Questions:236-240