Changed PCNSE Exam Questions

Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 Questions and Answers

Question 45

The UDP-4501 protocol-port is to between which two GlobalProtect components?

Options:

GlobalProtect app and GiobalProtect satellite

GlobalRrotect app and GlobalProtect gateway

GlobalProtect portal and GlobalProtect gateway

GlobalProtect app and GlobalProtect portal

Question 46

A firewall administrator is configuring an IPSec tunnel between a company's HQ and a remote location. On the HQ firewall, the interface used to terminate the IPSec tunnel has a static IP. At the remote location, the interface used to terminate the IPSec tunnel has a DHCP assigned IP address.

Which two actions are required for this scenario to work? (Choose two.)

Options:

On the HQ firewall select peer IP address type FQDN

On the remote location firewall select peer IP address type Dynamic

On the HQ firewall enable DDNS under the interface used for the IPSec tunnel

On the remote location firewall enable DONS under the interface used for the IPSec tunnel

Question 47

A new firewall has the Threat Prevention subscription, but the Antivirus does not appear in Dynamic Updates.

What must occur to have Antivirus signatures update?

Options:

An Antivirus license is needed first, then a Security profile for Antivirus needs to be created.

An Antivirus license must be obtained before Dynamic Updates can be downloaded or installed.

An Advanced Threat Prevention license is required to see the Dynamic Updates for Antivirus.

Install the Application and Threats updates first, then refresh the Dynamic Updates.

Question 48

What happens when an A/P firewall pair synchronizes IPsec tunnel security associations (SAs)?

Options:

Phase 1 and Phase 2 SAs are synchronized over HA3 links.

Phase 2 SAs are synchronized over HA2 links.

Phase 1 and Phase 2 SAs are synchronized over HA2 links.

Phase 1 SAs are synchronized over HA1 links.

Month End Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Palo Alto Networks Certified Security Engineer (PCNSE) PAN-OS 11.0 Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

Explanation:

CompTIA

Fortinet

Microsoft

Salesforce