Free Palo Alto Networks PCNSE Exam Dumps and PCNSE Exam Questions

Question No: 1

MultipleChoice

Review the images. A firewall policy that permits web traffic includes the global-logs policy is depicted

What is the result of traffic that matches the 'Alert - Threats' Profile Match List?

Options

AThe source address of SMTP traffic that matches a threat is automatically blocked as BadGuys for 180 minutes.

BThe source address of traffic that matches a threat is automatically blocked as BadGuys for 180 minutes.

CThe source address of traffic that matches a threat is automatically tagged as BadGuys for 180 minutes.

DThe source address of SMTP traffic that matches a threat is automatically tagged as BadGuys for 180 minutes.

Question No: 2

DragDrop

Match the terms to their corresponding definitions

Question No: 3

MultipleChoice

Refer to the diagram. Users at an internal system want to ssh to the SSH server The server is configured to respond only to the ssh requests coming from IP 172.16.16.1.

In order to reach the SSH server only from the Trust zone, which Security rule and NAT rule must be configured on the firewall?

Options

ANAT Rule:
Source Zone: Trust -
Source IP: Any -
Destination Zone: Server -
Destination IP: 172.16.15.10 -
Source Translation: Static IP / 172.16.15.1
Security Rule:
Source Zone: Trust -
Source IP: Any -
Destination Zone: Trust -
Destination IP: 172.16.15.10 -
Application: ssh

BNAT Rule:
Source Zone: Trust -
Source IP: 192.168.15.0/24 -
Destination Zone: Trust -
Destination IP: 192.168.15.1 -
Destination Translation: Static IP / 172.16.15.10
Security Rule:
Source Zone: Trust -
Source IP: 192.168.15.0/24 -
Destination Zone: Server -
Destination IP: 172.16.15.10 -
Application: ssh

CNAT Rule:
Source Zone: Trust -
Source IP: Any -
Destination Zone: Trust -
Destination IP: 192.168.15.1 -
Destination Translation: Static IP /172.16.15.10
Security Rule:
Source Zone: Trust -
Source IP: Any -
Destination Zone: Server -
Destination IP: 172.16.15.10 -
Application: ssh

DNAT Rule:
Source Zone: Trust -
Source IP: Any -
Destination Zone: Server -
Destination IP: 172.16.15.10 -
Source Translation: dynamic-ip-and-port / ethernet1/4
Security Rule:
Source Zone: Trust -
Source IP: Any -
Destination Zone: Server -
Destination IP: 172.16.15.10 -
Application: ssh

Question No: 4

MultipleChoice

An organization conducts research on the benefits of leveraging the Web Proxy feature of PAN-OS 11.0.

What are two benefits of using an explicit proxy method versus a transparent proxy method? (Choose two.)

. No client configuration is required for explicit proxy, which simplifies the deployment complexity.

Options

BExplicit proxy supports interception of traffic using non-standard HTTPS ports.

CIt supports the X-Authenticated-User (XAU) header, which contains the authenticated username in the outgoing request.

DExplicit proxy allows for easier troubleshooting, since the client browser is aware of the existence of the proxy.

Question No: 5

DragDrop

Match the terms to their corresponding definitions