Free Palo Alto Networks Certified Security Engineer PAN-OS 11.0 Exam Dumps

MultipleChoice

Review the images. A firewall policy that permits web traffic includes the

What is the result of traffic that matches the 'Alert - Threats' Profile Match List?

MultipleChoice

The NAT rule destination zone should be set to Outside because that is the zone where the post-NAT IP address of the server (192.168.10.10) belongs. The destination zone of a NAT rule is the zone where the translated IP address resides. Option A is incorrect because None is not a valid zone for a NAT rule. Option C is incorrect because DMZ is the zone where the pre-NAT IP address of the server (153.6 12.10) belongs, not the post-NAT IP address. Option D is incorrect because Inside is not a zone that is configured on the firewall.

An administrator is troubleshooting why video traffic is not being properly classified.

If this traffic does not match any QoS classes, what default class is assigned?

MultipleChoice

A network administrator configured a site-to-site VPN tunnel where the peer device will act as initiator None of the peer addresses are known What can the administrator configure to establish the VPN connection1?

MultipleChoice

After configuring HA in Active/Passive mode on a pair of firewalls the administrator gets a failed commit with the following details.

What are two s for this type of issue? (Choose two)

MultipleChoice

A Panorama administrator configures a new zone and uses the zone in a new Security policy.

After the administrator commits the configuration to Panorama, which device-group commit push operation should the administrator use to ensure that the push is successful?

MultipleChoice

An administrator cannot see any Traffic logs from the Palo Alto Networks NGFW in Panorama reports. The configuration problem seems to be on the firewall. Which settings if configured incorrectly most likely would stop only Traffic logs from being sent from the NGFW to Panorama?

A)

B)

C)

D)

MultipleChoice

Which two features require another license on the NGFW? (Choose two.)

MultipleChoice

A user at an external system with the IP address 65.124 57 5 queries the DNS server at 4 2 2 2 for the IP address of the web server www xyz com The DNS server returns an address of 172 16 151

In order to reach the web server, which Security rule and NAT rule must be configured on the firewall?

A)

B)

C)

D)

MultipleChoice

Which three use cases are valid reasons for requiring an Active/Active high availability deployment? (Choose three )

MultipleChoice

A firewall administrator has been asked to configure a Palo Alto Networks NGFW to prevent against compromised hosts trying to phone-home or beacon out to external command-and-control (C2) servers.

Which security Profile type will prevent these behaviors?